CVE-2019-5259: Improper Privilege Management

There is an information leakage vulnerability on some Huawei productsAR120-S;AR1200;AR1200-S;AR150;AR150-S;AR160;AR200;AR200-S;AR2200;AR2200-S;AR3200;AR3600. An attacker with low permissions can view some high-privilege information by running specific commands.Successful exploit could cause an...

CVE-2019-5250: Improper Privilege Management

Mate 20 Pro smartphones with versions earlier than 9.1.0.135C00E133R3P1 have an improper authorization vulnerability. The software does not properly restrict certain operation of certain privilege, the attacker could trick the user into installing a malicious application before the user turns on...

PT-2019-5776

Name of the Vulnerable Software and Affected Versions SchedMD Slurm versions prior to 18.08.9 SchedMD Slurm versions 19.x prior to 19.05.5 Description The issue is related to the srun --uid command in the SLURM resource management system, which is associated with insecure privilege management...

PT-2019-4526

Name of the Vulnerable Software and Affected Versions Linux Administrative Tools for IntelR Network Adapters versions prior to 24.3 Description The issue is related to insufficient memory protection, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2019-5990

Name of the Vulnerable Software and Affected Versions Adobe Acrobat and Reader versions 2019.021.20056 and earlier Adobe Acrobat and Reader versions 2017.011.30155 and earlier Adobe Acrobat and Reader versions 2015.006.30505 and earlier Description The issue is related to a security bypass...

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers relates to insecure privilege management, allowing attackers to escalate their privileges.

The vulnerability of the Kernel Mode Driver component in Intel Graphics Drivers is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Intel PROSet/Wireless WiFi networking utility lies in the insecure management of privileges, allowing attackers to elevate their privileges, cause service failures, and expose sensitive information.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges, cause service failures, and expose sensitive information...

CVE-2012-2148: Improper Privilege Management

An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies...

CVE-2019-2225: Improper Privilege Management

When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the user, and that device may be able to interact with the phone. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is...

CVE-2012-1104: Improper Privilege Management

A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed...

The vulnerability of the Windows Graphics component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Graphics component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Windows Graphics component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Graphics component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

Vulnerability of the Win32k component in Windows operating systems with insecure privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of Google Chrome, related to privilege management errors, allows a perpetrator to elevate their privileges.

The vulnerability of Google Chrome relates to privilege management errors. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created extension...

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 allows attackers to enhance their privileges.

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 relates to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges using a specially crafted file...

CVE-2019-4465: Improper Privilege Management

IBM Cloud Pak System 2.3 and 2.3.0.1 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 163774...

CVE-2012-4480: Improper Privilege Management

mom creates world-writable pid files in /var/run...

PT-2019-5305 · Gnu +2 · Grub2 +2

Name of the Vulnerable Software and Affected Versions: grub2 affected versions not specified Description: A flaw was found in the grub2-set-bootflag utility of grub2, related to insecure privilege management. This issue can be exploited by a local attacker running the utility under resource...

CVE-2019-6668: Improper Privilege Management

The BIG-IP APM Edge Client for macOS bundled with BIG-IP APM 15.0.0-15.0.1, 14.1.0-14.1.0.5, 14.0.0-14.0.0.4, 13.1.0-13.1.1.5, 12.1.0-12.1.5, and 11.5.1-11.6.5 may allow unprivileged users to access files owned by root...

CVE-2019-7319: Improper Privilege Management

An issue was discovered in Cloudera Hue 6.0.0 through 6.1.0. When using one of following authentication backends: LdapBackend, PamBackend, SpnegoDjangoBackend, RemoteUserDjangoBackend, SAML2Backend, OpenIDBackend, or OAuthBackend, external users are created with superuser privileges...