The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface of the Cisco Connected Mobile Experiences software relates to errors in privilege management. Exploiting this vulnerability allows an attacker to execute arbitrary commands with root privileges...

CVE-2020-8290

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...

Design/Logic Flaw

Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in bztransmit helper due to lack of permission handling and validation before creation of client update directories allowing for local escalation of privilege via rogue client update binary...

CVE-2020-8290

CVE-2020-8290 affects Backblaze for Windows and macOS prior to version 7.0.0.439. The root cause is improper privilege management in the bztransmit helper, specifically lack of permission handling and validation when creating the client update directory (bzupdates). This enables a local unprivile...

The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.

The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the kernel driver sncc0.sys of the Secret Net security system and Secret Net Studio, related to privilege management errors, allows attackers to bypass the Randomization of the Operating System’s Kernel Address Space (ASLR) mechanism.

The vulnerability of the kernel driver sncc0.sys in the Secret Net and Secret Net Studio security solutions is related to privilege management errors. Exploiting this vulnerability allows an attacker to bypass the Randomization of the Operating System’s Kernel Address Space ASLR mechanism and...

The vulnerability of the Bubblewrap application, related to insecure management of privileges, allows a perpetrator to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Bubblewrap application is related to insecure handling of privileges. Exploiting this vulnerability allows an attacker operating remotely to compromise the confidentiality and integrity of the protected information...

The vulnerability of the Cloud Files Mini Filter Driver for operating systems Windows allows attackers to increase their privileges.

The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2020-25194

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges...

Input validation

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges...

CVE-2020-25194 MOXA NPort IAW5000A-I/O Series

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges...

CVE-2020-25194

CVE-2020-25194 affects MOXA NPort IAW5000A-I/O Series, firmware 2.1 or lower. The vulnerability is due to improper privilege management in the built‑in WEB server, potentially allowing a user‑level attacker to perform requests with administrative privileges. CVSSv3.1/ATT&CK context indicates high...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain access to protected information...

PT-2020-16009

Name of the Vulnerable Software and Affected Versions MOXA NPort IAW5000A-I/O firmware versions 2.1 or lower Description The issue concerns improper privilege management in the built-in WEB server, potentially allowing an attacker with user privileges to perform requests with administrative...

The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain access to protected information.

The vulnerability of the Web interface of the Cisco Data Center Network Manager system is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain access to protected information...

CVE-2020-25194: Improper Privilege Management

The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user privileges to perform requests with administrative privileges...

The vulnerability of the uvc_scan_chain_forward function in Android operating system USB drivers allows a hacker to increase their privileges.

The vulnerability of the uvcscanchainforward function in the Android operating system’s USB driver is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to enhance their privileges...

RHEL 8 : net-snmp (RHSA-2020:5420)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5420 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

RHEL 8 : net-snmp (RHSA-2020:5480)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5480 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible...

CVE-2020-12519: Improper Privilege Management

On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges...