The vulnerability of Firefox ESR browser for Android operating systems, related to insecure management of privileges, allows attackers to compromise the integrity of protected information.

The vulnerability of Firefox ESR browser for Android operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to compromise the integrity of protected information...

VulnCheck KEV: CVE-2021-20021

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host...

The vulnerability in the isolated environment of the Firefox browser’s iframe on Android allows a perpetrator to compromise data integrity.

The vulnerability in the isolated iframe of the Firefox browser for Android is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to compromise data integrity...

PT-2021-2864 · Vmware · Vmware Nsx-T

Name of the Vulnerable Software and Affected Versions: VMware NSX-T affected versions not specified Description: The issue is related to the implementation of Role Based Access Control RBAC in VMware NSX-T, specifically concerning insecure privilege management. This could allow a remote attacker ...

CVE-2021-27394: Improper Privilege Management

A vulnerability has been identified in Mendix Applications using Mendix 7 All versions V7.23.19, Mendix Applications using Mendix 8 All versions V8.17.0, Mendix Applications using Mendix 8 V8.12 All versions V8.12.5, Mendix Applications using Mendix 8 V8.6 All versions V8.6.9, Mendix Applications...

CVE-2021-29452: Improper Privilege Management

a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked allowing any logged in user to make th...

PT-2021-2817

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions 18.3R1 and later versions on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2 Juniper Networks Junos OS versions 18.4R1 and later versions on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series wi...

The vulnerability of the Windows Installer component on Microsoft Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Installer component in Microsoft Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2021-2781

Name of the Vulnerable Software and Affected Versions Mendix Applications using Mendix 7 versions prior to 7.23.19 Mendix Applications using Mendix 8 versions prior to 8.17.0 Mendix Applications using Mendix 8 V8.12 versions prior to 8.12.5 Mendix Applications using Mendix 8 V8.6 versions prior t...

Schneider Electric C-Bus Toolkit

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Schneider Electric Equipment: C-Bus Toolkit Vulnerabilities: Improper Privilege Management, Path Traversal 2. RISK EVALUATION Successful exploitation of these vulnerabilities may allow remote code...

CVE-2021-30478: Improper Privilege Management

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the canforgesender permission previously isapisuperuser resulted in users with this permission being able to send messages appearing as if sent by a system bot, including to other organizations hosted by the same...

CVE-2021-30479: Improper Privilege Management

An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the allpublicstreams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization...

The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system, which allows a hacker to gain unauthorized access to protected information.

The vulnerability of the SnCloneVault.sys driver of the Secret Net Studio information protection system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Siemens Mendix

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Mendix Vulnerability: Improper Privilege Management 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a non-administrative user to gain administrative...

PT-2021-2620

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in privilege management within the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to elevate their...

PT-2021-2708 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to unsafe privilege management in the Win32k component of Windows operating systems. It allows an attacker to elevate their privileges. Recommendations: At the moment,...

PT-2021-2709 · Microsoft · Visual Studio Installer

Name of the Vulnerable Software and Affected Versions: Visual Studio Installer affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Visual Studio development software installation service. Exploitation of this issue may allow an...

PT-2021-2581 · Microsoft · Windows Installer +1

Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to errors in privilege management within the Windows Installer component of Microsoft Windows operating systems. This can allow an attacker to elevate their...

PT-2021-2721 · Microsoft · Windows Speech Runtime +1

Name of the Vulnerable Software and Affected Versions: Windows Speech Runtime affected versions not specified Description: The issue is related to errors in privilege management within the Windows Speech Runtime component of Microsoft Windows operating systems. This can allow an attacker to eleva...

PT-2021-2684 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. It is associated with errors in managing privileges. Exploitation of this vulnerability could allow an attacker to elevate...