6777 matches found
Design/Logic Flaw
An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...
CVE-2019-11847 ALEOS User Root Shell Escalation
An improper privilege management vulnerabitlity exists in ALEOS before 4.11.0, 4.9.4 and 4.4.9. An authenticated user can escalate to root via the command shell...
CVE-2019-11847
CVE-2019-11847 describes a privilege management flaw in ALEOS prior to 4.11.0, 4.9.4, and 4.4.9. An authenticated user can escalate to root via the command shell due to mismanagement of privileges. Affected product context refers to ALEOS (embedded M2M/IDE environment). The available sources stat...
CVE-2020-8624: Improper Privilege Management
In BIND 9.9.12 - 9.9.13, 9.10.7 - 9.10.8, 9.11.3 - 9.11.21, 9.12.1 - 9.16.5, 9.17.0 - 9.17.3, also affects 9.9.12-S1 - 9.9.13-S1, 9.11.3-S1 - 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker who has been granted privileges to change a specific subset of the zone's content could abu...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...
Denial Of Service (DoS)
MySQL is vulnerable to denial of service DoS due to flaws in managing Privileges...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
DEBIAN-CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
Input validation
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
Huawei FusionCompute Information Disclosure Vulnerability (CNVD-2020-47548)
Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An information disclosure vulnerability exists in Huawei FusionCompute version 8.0.0, which stems from the module's failure to...
The vulnerability of the Schneider Electric Modbus Serial Driver and Schneider Electric Modbus Driver Suite, related to insecure management of privileges, allows attackers to escalate their privileges.
The vulnerability of the Schneider Electric Modbus Serial Driver and Schneider Electric Modbus Driver Suite lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
CVE-2020-15862
CVE-2020-15862 affects Net-SNMP with an improper privilege management flaw: SNMP WRITE access to the EXTEND MIB allows an authenticated local attacker to execute arbitrary commands as root. Practical impact is local privilege escalation; exploitation requires access to an authenticated SNMP sessi...
CVE-2020-15862: Improper Privilege Management
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
PT-2020-5181
Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description The vulnerability in the web interface of Cisco Data Center Network Manager is related to privilege management errors. It may allow a remote attacker to gain access ...
PT-2020-5218
Name of the Vulnerable Software and Affected Versions Cisco Connected Mobile Experiences CMX affected versions not specified Description The issue is related to insufficient security mechanisms in the restricted shell implementation of the CLI, allowing an authenticated, local attacker with...