6769 matches found
PT-2019-3054 · Microsoft · Azure Active Directory Authentication Library
Name of the Vulnerable Software and Affected Versions: Azure Active Directory Authentication Library affected versions not specified Description: The issue is related to insecure privilege management in the Azure Active Directory Authentication Library, specifically in the On-Behalf-Of flow, wher...
PT-2019-2990 · Microsoft · Windows Defender
Name of the Vulnerable Software and Affected Versions: Windows Defender affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the MpSigStub.exe file for Defender, allowing file deletion in arbitrary locations. To exploit this, an attacker...
CVE-2019-12618: Improper Privilege Management
HashiCorp Nomad 0.9.0 through 0.9.1 has Incorrect Access Control via the exec driver...
Exploit for CVE-2019-13272
CVE-2019-13272 Linux local root exploit Linux 4.10 "...
CVE-2019-11270: Improper Privilege Management
Cloud Foundry UAA versions prior to v73.4.0 contain a vulnerability where a malicious client possessing the 'clients.write' authority or scope can bypass the restrictions imposed on clients created via 'clients.write' and create clients with arbitrary scopes that the creator does not possess...
Exploit for CVE-2019-13272
CVE-2019-13272 The exploit for CVE-2019-13272 Vulnerabi...
Exploit for CVE-2019-13272
CVE-2019-13272 Linux local root exploit Linux 4.10 "...
Open edX platform security feature issue vulnerability
The Open edX platform is an open source course management system CMS. The system can be used for MOOCs Massive Open Online Courses as well as smaller courses and training modules. A security feature issue vulnerability exists in the installation process in versions of Open edX prior to 2017-01-10...
The vulnerability of Azure Automation’s Windows operating system lies in the insecure management of privileges, allowing a malicious actor to escalate their privileges.
The vulnerability of the Azure Automation service for the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
Possibility to extend internal share permissions using the API - ownCloud security advisory
Platform: ownCloud Server Versions: 10.0.0 Date: 7/25/2019 Risk level: High CVSS v3 Base Score: 8 Improper Privilege Management, CWE-269...
The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to gain unauthorized access to confidential information.
The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information...
The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...
The vulnerability of the Windows operating system, related to privilege management errors, allows a perpetrator to escalate their privileges.
The vulnerability of the Windows operating system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...
The vulnerability of the Active Directory Federation Services (ADFS) on the Windows operating system allows a perpetrator to circumvent the blocking policy of ADFS.
The vulnerability of the Active Directory Federation Services ADFS on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to circumvent blocking policies by using a specially created application and brute-force...
The vulnerability of the Windows Audio service on the Windows operating system allows a perpetrator to execute arbitrary code with elevated privileges.
The vulnerability of the Windows Audio service in the Windows operating system is related to privilege management errors. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges through a specially created application...
CVE-2019-11553: Improper Privilege Management
In Code42 for Enterprise through 6.8.4, an administrator without web restore permission but with the ability to manage users in an organization can impersonate a user with web restore permission. When requesting the token to do a web restore, an administrator with permission to manage a user coul...
Moxa OnCell G3100-HSPA Security Feature Issue Vulnerability
Moxa OnCell G3100-HSPA is a G3100-HSPA series cellular network gateway device from Moxa, Taiwan, China. A security feature issue vulnerability exists in Moxa OnCell G3100-HSPA Series 1.6 Build 17100315 and prior versions. The vulnerability stems from a lack of security measures such as...
Moxa OnCell G3100-HSPA Security Feature Issue Vulnerability (CNVD-2019-23542)
Moxa OnCell G3100-HSPA is a G3100-HSPA series cellular network gateway device from Moxa, Taiwan, China. A security feature issue vulnerability exists in Moxa OnCell G3100-HSPA 1.6 Build 17100315 and earlier versions. The vulnerability stems from a lack of security measures such as authentication,...