The vulnerability of Cryptohome’s Google Chrome browser component, which allows a hacker to increase their privileges.

The vulnerability of Cryptohome’s Google Chrome browser component relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to increase their privileges...

The vulnerability of the telnetd component in the Junos operating system allows a hacker to increase their privileges.

The vulnerability of the telnetd component in the Junos operating system is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2021-25630: Improper Privilege Management

"loolforkit" is a privileged program that is supposed to be run by a special, non-privileged "lool" user. Before doing anything else "loolforkit" checks, if it was invoked by the "lool" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of "loolforkit" this...

The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability in the Intel EPID SDK for development tools relates to privilege management errors, allowing a perpetrator to elevate their privileges.

The vulnerability of the Intel EPID SDK development tools is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the PsExec remote execution tool, related to privilege management errors, allows a hacker to escalate their privileges.

The vulnerability of the remote execution command PsExec is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Windows Event Tracing service allows a perpetrator to cause a service failure.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Windows Event Tracing service allows attackers to escalate their privileges.

The vulnerability of the Windows Event Tracing service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerabilities of Intel Quartus Prime Pro and Intel Quartus Prime Standard software-based design systems involve privilege management errors, which allow attackers to escalate their privileges.

The vulnerability of Intel Quartus Prime Pro and Intel Quartus Prime Standard automated design systems is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection, allowing attackers to enhance their privileges.

The vulnerability of Microsoft Windows operating systems’ Windows Defender protection lies in privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of Microsoft Azure Kubernetes operating system, which allows attackers to escalate their privileges

The vulnerability of Microsoft Azure Kubernetes operating system is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to escalate their privileges remotely...

The vulnerability of the System-on-a-Chip Driver for Intel Compute Stick STK1A32SC allows a hacker to gain increased privileges.

The vulnerability of the System-on-a-Chip Driver for Intel Compute Stick STK1A32SC is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the System Center Operations Manager software for managing and monitoring IT services, related to privilege management errors, allows a perpetrator to escalate their privileges.

The vulnerability of the System Center Operations Manager software for managing and monitoring IT services is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Privilege Management Error Vulnerability (CNVD-2021-17242)

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A privilege management error vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by a remote...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Privilege Management Error Vulnerability (CNVD-2021-17241)

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. A privilege management error vulnerability exists in MB connect line mymbCONNECT24 and mbCONNECT24, which can be exploited by a remote...

The vulnerability of the Win32k component in Microsoft Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Microsoft Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Fax Service in Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Fax Service in Windows operating systems is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2021-26697: Improper Privilege Management

The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can jus...

Important: Red Hat Security Advisory: net-snmp security update

An update for net-snmp is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

CVE-2020-35557: Improper Privilege Management

An issue in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual in all versions through v2.11.2 allows a logged in user to see devices in the account he should not have access to due to improper use of access validation...