6777 matches found
CVE-2020-1488
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
CVE-2015-8032: Improper Privilege Management
In Textpattern 4.5.7, an unprivileged author can change an article's markup setting...
CVE-2020-24331: Improper Privilege Management
An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges, the tss user still has read and write access to the /etc/tcsd.conf file which contains various settings related to this daemon...
CVE-2020-24330: Improper Privilege Management
An issue was discovered in TrouSerS through 0.3.14. If the tcsd daemon is started with root privileges instead of by the tss user, it fails to drop the root gid privilege when no longer needed...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
PT-2020-3650
Name of the Vulnerable Software and Affected Versions Schneider Electric Modbus Serial Driver affected versions not specified Schneider Electric Modbus Driver Suite affected versions not specified Description The issue is related to improper privilege management, which could lead to local privile...
CVE-2020-15826: Improper Privilege Management
In JetBrains TeamCity before 2020.1, users are able to assign more permissions than they have...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
The vulnerability of the Global Protect Agent for Linux’s endpoint protection software lies in its insecure handling of privileges. This allows attackers to elevate their privileges to the root level.
The vulnerability of the Global Protect Agent for Linux endpoint protection software lies in the insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
Gantt-Chart For Jira 5.5.3 Missing Privilege Check Vulnerability
Gantt-Chart for Jira versions 5.5.3 and below misses a privilege check which allows an attacker to read and write the module configuration for other users. Product: Jira module "Gantt-Chart for Jira" Manufacturer: Frank Polscheit - Solutions & IT-Consulting Affected Versions: =5.5.3 Tested...
The vulnerability of the Google Chrome browser installer allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome browser installers is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...
Gantt-Chart For Jira 5.5.3 Missing Privilege Check
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-029 Product: Jira module "Gantt-Chart for Jira" Manufacturer: Frank Polscheit - Solutions & IT-Consulting Affected Versions: =5.5.3 Tested Versions: 5.5.3 Vulnerability Type: Improper Privilege Management CWE-269 Risk Level:...
PT-2020-5975
Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 68.11 Description The issue is related to insecure privilege management in Firefox ESR for Android, allowing an attacker to overwrite local files, including Firefox settings, if a malicious file picker application...
The vulnerability of the MpSigStub.exe executable of Microsoft Windows Defender allows a hacker to delete files in certain parts of the file system.
The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to delete files in certain parts of the file system remotely...
The vulnerability of the Microsoft Windows USO Core Worker component of the Windows operating system, which allows a hacker to escalate their privileges
The vulnerability of the Microsoft Windows USO Core Worker component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Palo Alto Networks Traps software lies in the insecure management of privileges, allowing an attacker to elevate privileges or re-write system files.
The vulnerability of the Palo Alto Networks Traps software lies in the insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate privileges or overwrite system files...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
CVE-2020-1412: Improper Privilege Management
A remote code execution vulnerability exists in the way that Microsoft Graphics Components handle objects in memory, aka 'Microsoft Graphics Components Remote Code Execution Vulnerability'...