PT-2019-1414

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the Windows operating system. It allows an attacker to bypass the user-mode code integrity policy UMCI using a specially crafted...

PT-2019-1524 · Mikrotik · Routeros +1

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS versions prior to 6.43.12 MikroTik RouterOS versions prior to 6.42.12 Description: The issue is related to privilege management errors in the operating system. It allows a remote attacker to bypass firewall policies. The...

PT-2019-1697

Name of the Vulnerable Software and Affected Versions Canonical snapd versions prior to 2.37.4 Description The issue is related to a problem with seccomp filters in snapd, which can allow a strict mode snap to insert characters into a terminal on a 64-bit host. This is due to the seccomp rules...

The vulnerability of Siemens Sinumerik programmable logic controllers lies in errors in control of resolution settings, which allows a intruder to exploit a privileged command to gain enhanced privileges.

The vulnerability of Siemens Sinumerik programmable logic controllers is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to use a privileged application command to elevate user privileges, but not to the level of root...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to execute processes with elevated privileges.

The vulnerability of the Windows operating system is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Microsoft .NET Framework software platform, related to insecure management of privileges, allows a perpetrator to execute arbitrary code.

The vulnerability of the Microsoft .NET Framework software platform is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created file from a remote location...

CVE-2017-6924: Improper Privilege Management

In Drupal 8 prior to 8.3.7; When using the REST API, users without the correct permission can post comments via REST that are approved even if the user does not have permission to post approved comments. This issue only affects sites that have the RESTful Web Services rest module enabled, the...

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges, allowing a perpetrator to execute arbitrary code on the server.

The vulnerability of Microsoft SharePoint Server and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the server through a specially created page...

The vulnerability of the Windows operating system is related to the insecure management of privileges, which allows attackers to disclose sensitive information that should be protected.

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created application...

The vulnerability of the McAfee True Key Windows Client password storage tool, related to privilege management errors, allows a hacker to execute arbitrary code.

The vulnerability of the McAfee True Key Windows Client password storage tool is related to privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the McAfee True Key Windows Client password storage tool, related to privilege management errors, allows a hacker to execute arbitrary code.

The vulnerability of the McAfee True Key Windows Client password storage tool is related to privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the minikube command-line utility, related to privilege management errors, allows a hacker to execute arbitrary code.

The vulnerability of the command-line tool for minikube is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the McAfee True Key Windows Client password storage tool, related to privilege management errors, allows a perpetrator to execute arbitrary commands.

The vulnerability of the McAfee True Key Windows Client password storage tool is related to privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

The vulnerability of the IOBit Advanced SystemCare optimization tool, related to privilege management errors, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IOBit Advanced SystemCare optimization tool is related to privilege management errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

The vulnerability of the IOBit Advanced SystemCare optimization tool, related to privilege management errors, allows a hacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the IOBit Advanced SystemCare optimization tool is related to privilege management errors. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

GHSA-9448-C9WQ-JG9V Improper Privilege Management in Apache Karaf

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

Improper Privilege Management in Apache Karaf

In Apache Karaf prior to 4.2.0 release, if the sshd service in Karaf is left on so an administrator can manage the running instance, any user with rights to the Karaf console can pivot and read/write any file on the file system to which the Karaf process user has access. This can be locked down a...

CVE-2018-15331: Improper Privilege Management

On BIG-IP AAM 13.0.0 or 12.1.0-12.1.3.7, the dcdbconvert utility used by BIG-IP AAM fails to drop group permissions when executing helper scripts, which could be used to leverage attacks against the BIG-IP system...

CVE-2018-11965: Improper Privilege Management

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, Anyone can execute proptrigger.sh which will lead to change in properties...

The vulnerability of network monitoring software for PRTG Network Monitor lies in the insecure management of privileges. This allows a malicious actor with the “read-only” privilege to create users with the “read-write” privilege.

The vulnerability of the network monitoring software PRTG Network Monitor relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, who has the “read-only” privilege, to create users with “read-write” privileges, including administrators, by using ...