PT-2021-2712 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Microsoft Internet Messaging API affected versions not specified Description: The issue is related to insecure privilege management in the Windows Event Tracing service and incorrect code generation...

PT-2021-2711 · Microsoft · Windows Services/Controller +1

Name of the Vulnerable Software and Affected Versions: Windows Services and Controller affected versions not specified Description: The issue is related to insecure privilege management in the Windows operating system, specifically affecting the Services and Controller application. It allows an...

PT-2021-2638 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Hyper-V component of the Windows operating system. Exploitation of this issue may allow a remote attacker to execute...

PT-2021-2722 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to insecure privilege management in the Hyper-V hardware virtualization system of Microsoft Windows. It may allow an attacker to bypass existing security...

The vulnerability of MongoDB Compass’s graphical interface, a database management system for MongoDB, relates to insecure privilege management. This allows attackers to escalate their privileges.

The vulnerability of MongoDB Compass’s graphical interface, a database management system by MongoDB, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Samsung SMR 安全漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A security vulnerability exists in versions prior to SMR APR-2021 Release 1, which stems from improper privilege management that allows untrusted applications to delete certain loc...

CVE-2021-25365: Improper Privilege Management

An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd...

CVE-2021-20021: Improper Privilege Management

A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host...

CVE-2021-30152: Improper Privilege Management

An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to "protect" a page, a user is currently able to protect to a higher level than they currently have permissions for...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 VMware vSphere Client Unauthorized File Upload...

The vulnerability of the Role-Based Access Control (RBAC) access control function in Cisco IOS XE SD-WAN software allows a attacker to increase their privileges.

The vulnerability of the Role-Based Access Control RBAC access control function in Cisco IOS XE SD-WAN software is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges by connecting only to the console port and accessing t...

The vulnerability of the McAfee Data Loss Prevention Endpoint software for Windows, related to insecure management of privileges, allows a perpetrator to execute DLL libraries.

The vulnerability of the McAfee Data Loss Prevention Endpoint software for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to load DLL libraries using specially crafted IOCTL calls...

The vulnerability of the `srun --uid` command for SLURM resource managers stems from insecure privilege management. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the srun --uid command used by SLURM resource managers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2021-24158: Improper Privilege Management

Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for...

Exploit for Out-of-bounds Write in Microsoft

CVE-2021-1732-Exploit CVE-2021-1732 Exploit...

The vulnerability of the Remote Access Service (RAS) interface of Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the Remote Access Service RAS interface in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Auto-Fill function in the Google Chrome browser allows a hacker to gain access to confidential data.

The vulnerability of the Auto-Fill function in Google Chrome is related to privilege management errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

The vulnerability of the Bind9 DNS-server implementation with the “--enable-native-pkcs11” option allows a attacker to cause a service failure.

The vulnerability of the Bind9 DNS-server implementation with the “--enable-native-pkcs11” option is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability could allow an attacker to cause service failures by sending specially crafted DNS queries signed with an...

The vulnerability of the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system, related to a lack of privilege management mechanisms, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the wp-includes/class-wp-xmlrpc-server.php component of the WordPress content management system is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity,...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Windows Container Execution Agent component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...