The vulnerability of the Windows Error Reporting service on Windows operating systems allows a perpetrator to gain access to confidential information and system functions.

The vulnerability of the Windows Error Reporting service in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to access confidential information and system functions through a specially created application...

PT-2020-5771 · Renaud Dubois Christophe Wolfhugel Olivier Salauen +2 · Sympa +2

Name of the Vulnerable Software and Affected Versions: Sympa versions prior to 6.2.56 Description: The issue is related to a lack of privilege management mechanism in the Sympa mailing list manager, which can be exploited to gain access to confidential data, compromise data integrity, and cause a...

The vulnerability of the Advanced Local Procedure Call operating system in Windows, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of the Advanced Local Procedure Call operating system in Windows allows for the exploitation of insecure privileges management. Exploiting this vulnerability can enable an attacker to enhance their privileges...

Vulnerability of Windows operating systems related to insecure privilege management, allowing attackers to execute arbitrary code

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using a specially crafted .LNK file...

CVE-2020-9326

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

CVE-2020-9326

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

CVE-2020-9326

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

Design/Logic Flaw

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

CVE-2020-9326

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

CVE-2020-9326

CVE-2020-9326 affects BeyondTrust Privilege Management for Windows and Mac (PMWM, formerly Avecto Defendpoint) versions 5.1 through 5.5 prior to 5.5 SR1. The vulnerability arises from mishandling command-line arguments that include PowerShell .ps1 file extensions, which leads to a crash of Defend...

The vulnerability of the Linux operating system, related to insecure management of privileges, allows a perpetrator to execute arbitrary code.

The vulnerability of the Linux operating system is related to insecure management of privileges. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2020-9326: Undefined Security Weakness

BeyondTrust Privilege Management for Windows and Mac aka PMWM; formerly Avecto Defendpoint 5.1 through 5.5 before 5.5 SR1 mishandles command-line arguments with PowerShell .ps1 file extensions present, leading to a DefendpointService.exe crash...

PT-2020-20586

Name of the Vulnerable Software and Affected Versions BeyondTrust Privilege Management for Windows and Mac versions 5.1 through 5.5 before 5.5 SR1 Description The issue arises from the mishandling of command-line arguments when PowerShell .ps1 file extensions are present, leading to a crash of th...

CVE-2020-7916: Improper Privilege Management

beteacher in class-lp-admin-ajax.php in the LearnPress plugin 3.2.6.5 and earlier for WordPress allows any registered user to assign itself the teacher role via the wp-admin/admin-ajax.php?action=learnpressbeteacher URI without any additional permission checks. Therefore, any user can change its...

CVE-2020-10589: Improper Privilege Management

v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo...

CVE-2020-10088: Improper Privilege Management

GitLab 12.5 through 12.8.1 has Insecure Permissions. Depending on particular group settings, it was possible for invited groups to be given the incorrect permission level...

The vulnerability of the REST API interface of the Cisco Data Center Network Manager (DCNM) system allows a perpetrator to increase their privileges.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager DCNM system is related to privilege management errors. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

The vulnerability in the implementation of the Secure Shell protocol for the Windows operating system allows a perpetrator to increase their privileges.

The vulnerability of the SSH protocol implementation in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Wireless Network Manager system, which manages network configurations on Windows operating systems, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system’s Wireless Network Manager relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k component in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...