The vulnerability of the Media Foundation component in Windows operating systems, which allows a hacker to execute arbitrary code.

The vulnerability of the Media Foundation component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Windows Update Stack component on Windows operating systems allows a perpetrator to escalate their privileges or execute arbitrary code.

The vulnerability of the Windows Update Stack component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges or execute arbitrary code...

The vulnerability of the Folder Redirection technology in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Folder Redirection technology in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Bind9 DNS-server implementation with the “--enable-native-pkcs11” option allows a attacker to cause a service failure.

The vulnerability of the Bind9 DNS-server implementation with the “--enable-native-pkcs11” option is related to the lack of a mechanism for managing privileges. Exploiting this vulnerability could allow an attacker to cause service failures by sending specially crafted DNS queries signed with an...

CVE-2020-7467: Improper Privilege Management

In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these...

CVE-2017-20002: Improper Privilege Management

The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH hence bypassing PAM's nulloksecure configuration. Thi...

CVE-2020-4184: Improper Privilege Management

IBM Security Guardium 11.2 performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 174802...

Adobe Creative Cloud Improper Privilege Management Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Adobe Creative Cloud on Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24, related to insecure management of privileges, allows a hacker to terminate web2go sessions in a account that he does not have access to.

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24 is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to terminate web2go sessions in a user’s account that they have no access to...

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24, related to insecure management of privileges, allows attackers to expose sensitive information or cause service failures.

The vulnerability of industrial remote access systems mymbCONNECT24 and mb CONNECT24 is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility is related to privilege management errors, allowing a hacker to elevate their privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1660)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : net-snmp (EulerOS-SA-2021-1660)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to ru...

The vulnerability of the McAfee Endpoint Security software lies in its insecure management of privileges, allowing attackers to circumvent existing security restrictions.

The vulnerability of the McAfee Endpoint Security security software is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially crafted file...

Exploit for Out-of-bounds Write in Microsoft

CVE-2021-1732-Exploit CVE-2021...

PT-2021-2421

Name of the Vulnerable Software and Affected Versions: Windows Storage Spaces Controller affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller driver for Windows operating systems. This vulnerability is...

PT-2021-2334 · Microsoft · Windows User Profile Service +1

Name of the Vulnerable Software and Affected Versions: Windows User Profile Service affected versions not specified Description: The issue is related to insecure privilege management in the Windows User Profile Service. Exploitation of this issue can allow an attacker to elevate their privileges...

PT-2021-2361 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Update Service, which is caused by insecure privilege management. This vulnerability can be exploited to allow...

PT-2021-2339

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows Update Stack Setup, which is caused by insecure privilege management. This vulnerability can be exploited to all...

PT-2021-2342 · Microsoft · Walletservice +1

Name of the Vulnerable Software and Affected Versions: Windows WalletService affected versions not specified Description: The issue is related to insecure privilege management in the WalletService component of the Windows operating system. It allows an attacker to elevate their privileges,...