The vulnerability of the LSILogic software module in Oracle VM VirtualBox allows a hacker to gain unauthorized access to protected information.

The vulnerability of the LSILogic software module in Oracle VM VirtualBox relates to the insecure management of privileges due to improper memory release. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...

The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software relates to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Native Image component in the Oracle GraalVM for JDK virtual machine allows a hacker to trigger a service failure.

The vulnerability of the Native Image component in the Oracle GraalVM for JDK lies in the insecure management of privileges. Exploiting this vulnerability allows a malicious actor to trigger a service failure using the HTTP protocol...

The vulnerability of the corporate VPN software Pritunl Client, related to insecure management of privileges, allows a hacker to elevate their privileges to the root level.

The vulnerability of the corporate VPN software Pritunl Client is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

CVE-2025-50124

A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a setup script...

CVE-2025-50124

CVE-2025-50124 affects Schneider Electric EcoStruxure IT Data Center Expert (DCE) prior to version 9.0 (8.3 and earlier). The vulnerability stems from a Charon executable/configuration that can be abused by a low-privileged attacker to gain root privileges, enabling privilege escalation via local...

PT-2025-29225 · Apache · Apache Server

Name of the Vulnerable Software and Affected Versions: Apache Server affected versions not specified Description: An Improper Privilege Management issue exists that could allow privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a set...

Schneider Electric EcoStruxure IT Data Center Expert 安全漏洞

Schneider Electric EcoStruxure IT Data Center Expert is a scalable monitoring software from Schneider Electric France that collects, organizes, and distributes critical device information to provide a comprehensive view of devices. A security vulnerability exists in Schneider Electric EcoStruxure...

CVE-2025-21000

Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth...

Security Bulletin: IBM watsonx Orchestrate Cartridge affected by vulnerability in kafka-clients-3.4.0.jar

Summary IBM watsonx Orchestrate Cartridge contains a vulnerable version of kafka-clients-3.4.0.jar Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients...

Wing FTP Server 安全漏洞

Wing FTP Server is a suite of cross-platform FTP server software open-sourced by Wing FTP Server. A security vulnerability exists in Wing FTP Server 7.4.4 and earlier versions, which stems from improper privilege management and may result in elevated privileges...

CVE-2025-21000

Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth...

CVE-2025-21000

Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth...

CVE-2025-21000

Improper privilege management in Bluetooth prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth...

Citrix Virtual Apps and Desktops 安全漏洞

Citrix Virtual Apps and Desktops is a virtualization software from Citrix Corporation, USA. A security vulnerability exists in Citrix Virtual Apps and Desktops that stems from improper privilege management and could lead to elevated privileges...

The vulnerability of the OAM service of the Nokia Single RAN network management platform allows a hacker to enhance their privileges.

The vulnerability of the OAM service of the Nokia Single RAN network management platform is related to incorrect restrictions on the path name to the catalog, leading to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

We Urgently Need Privilege Management in MCP: a Measurement of API Usage in MCP Ecosystems

The Model Context Protocol MCP has emerged as a widely adopted mechanism for connecting large language models to external tools and resources. While MCP promises seamless extensibility and rich integrations, it also introduces a substantially expanded attack surface: any plugin can inherit broad...

Nokia Single RAN 安全漏洞

Nokia Single RAN is a wireless network technology from Nokia, Finland. A security vulnerability exists in Nokia Single RAN 24R1-SR prior to version 0.2 MP, which stems from improper privilege management and could result in elevated privileges...

The vulnerability of the software for the Hitachi Energy MicroSCADA X SYS600 system, related to insecure management of privileges, allows a perpetrator to disclose protected information.

The vulnerability of the software used in the Hitachi Energy MicroSCADA X SYS600 equipment management system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to disclose protected information...

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges.

The vulnerability of the Remote Access Connection Manager in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...