The vulnerability of the Norton App Lock tool, related to insecure management of privileges, allows a violator to gain unauthorized access to the device.

The vulnerability of the Norton App Lock utility is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to the device...

CVE-2012-1563: Improper Privilege Management

Joomla! before 2.5.3 allows Admin Account Creation...

CVE-2015-5072: Improper Privilege Management

The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the imageid parameter...

CVE-2015-5071: Improper Privilege Management

AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the report parameter of the BIRT viewer servlet...

CVE-2014-6448: Improper Privilege Management

Juniper Junos OS 13.2 before 13.2R5, 13.2X51, 13.2X52, and 13.3 before 13.3R3 allow local users to bypass intended restrictions and execute arbitrary Python code via vectors involving shell access...

CVE-2012-4767: Improper Privilege Management

An issue exists in Safend Data Protector Agent 3.4.5586.9772 in the securitylayer.log file in the logs.9972 directory, which could let a malicious user decrypt and potentially change the Safend security policies applied to the machine...

CVE-2019-19728: Improper Privilege Management

SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges...

PT-2020-1558 · Apache +1 · Apache +1

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.3 Description: An issue in rConfig allows an attacker to bypass local security restrictions due to insecure privilege management in the /etc/sudoers file. This occurs after an update to the rConfig specific Apache...

CVE-2019-19585: Improper Privilege Management

An issue was discovered in rConfig 3.9.3. The install script updates the /etc/sudoers file for rconfig specific tasks. After an "rConfig specific Apache configuration" update, apache has high privileges for some binaries. This can be exploited by an attacker to bypass local security restrictions...

CVE-2013-4161: Improper Privilege Management

gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue...

CVE-2013-2016: Improper Privilege Management

A flaw was found in the way qemu v1.3.0 and later virtio-rng validates addresses when guest accesses the config space of a virtio device. If the virtio device has zero/small sized config space, such as virtio-rng, a privileged guest user could use this flaw to access the matching host's qemu...

CVE-2012-5663: Improper Privilege Management

The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...

CVE-2019-20074: Improper Privilege Management

On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page...

CVE-2013-4867: Improper Privilege Management

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

CVE-2013-5027: Improper Privilege Management

Collabtive 1.0 has incorrect access control...

CVE-2019-20043: Improper Privilege Management

In in wp-includes/rest-api/endpoints/class-wp-rest-posts-controller.php in WordPress 3.7 to 5.3.0, authenticated users who do not have the rights to publish a post are able to mark posts as sticky or unsticky via the REST API. For example, the contributor role does not have such rights, but this...

The vulnerability of the Apache Hadoop distributed development and execution platform, related to insecure privilege management, allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Apache Hadoop distributed development and execution platform is related to insecure privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

The vulnerability of Intel Ethernet 700 series controller microprogramming software, related to buffer overflow vulnerabilities, allows attackers to escalate their privileges, cause service failures, or gain unauthorized access to protected information.

The vulnerability of Intel Ethernet 700 series controller microprogramming software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, or gain unauthorized access to protected information...

The vulnerability of the IBM DB2 database management system, related to privilege management errors, allows a perpetrator to elevate their privileges.

The vulnerability of the IBM DB2 database management system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the driver ilp60x64.sys in Intel Ethernet controllers of the 700 series allows attackers to gain increased privileges.

The vulnerability of the ilp60x64.sys driver for Intel Ethernet Series 700 controllers is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...