Lucene search
+L

1553 matches found

Positive Technologies
Positive Technologies
•added 2026/05/25 12:00 a.m.•26 views

PT-2026-43146

Name of the Vulnerable Software and Affected Versions StoreApps Smart Manager versions prior to 8.85.0 Description Incorrect Privilege Assignment in StoreApps Smart Manager allows for Privilege Escalation, a condition where a user can gain higher levels of access or permissions than they are...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/25 12:00 a.m.•17 views

WordPress plugin Smart Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/25 12:00 a.m.•2 views

CVE-2026-45216: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in StoreApps Smart Manager allows Privilege Escalation. This issue affects Smart Manager: from n/a through 8.85.0...

8.8CVSS5.8AI score0.00417EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/22 2:16 p.m.•17 views

CVE-2025-32747

Dell PowerFlex Manager, versions =4.6.2, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS0.0009EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/05/22 1:02 p.m.•14 views

CVE-2025-32747

Dell PowerFlex Manager, versions =4.6.2, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

5.3CVSS7.3AI score0.0009EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/22 1:02 p.m.•38 views

CVE-2025-32747

Dell PowerFlex Manager

7.8CVSS7.3AI score0.0009EPSS
SaveExploits0References2Affected Software3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/22 12:00 a.m.•0 views

CVE-2025-32747: Incorrect Privilege Assignment

Dell PowerFlex Manager, versions =4.6.2, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS5.9AI score0.0009EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/05/22 12:00 a.m.•24 views

PT-2026-42759

Dell PowerFlex Manager, versions =4.6.2, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

5.3CVSS5.8AI score0.0009EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/20 11:16 a.m.•25 views

CVE-2026-22315

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

0.00349EPSS
SaveExploits0
CVE
CVE
•added 2026/05/20 10:46 a.m.•40 views

CVE-2026-22315

An incorrect privilege assignment vulnerability exists in the Mesalvo Meona Client Launcher Component and Mesalvo Meona Server Component . This flaw allows for the export of user data, including cleartext passwords , via the SQL editor . The vulnerability affects Meona Client Launcher Component v...

5.8AI score0.00349EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/05/20 10:46 a.m.•72 views

CVE-2026-22315

...

0.00349EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/20 12:00 a.m.•102 views

PT-2026-42142

Name of the Vulnerable Software and Affected Versions Meona Client Launcher Component versions prior to 19.06.2020 15:11:49 Meona Server Component versions prior to 2025.04 5+323020 Description An incorrect privilege assignment allows the export of user data, including cleartext passwords, throug...

7.2CVSS5.9AI score0.00349EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•3 views

CVE-2026-22315: Undefined Security Weakness

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

7.2CVSS5.7AI score0.00349EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/05/17 1:36 p.m.•13 views

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment in the pre-auth logic that enables an attacker to activate the default-disabled POJO import feature. The attacker can then upload and import a malicious Java POJO leading to execution of arbitrary code by...

8.8CVSS5.9AI score0.00543EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•0 views

CVE-2025-68420: Incorrect Privilege Assignment

Comarch ERP Optima client connects to a database using a high privileged account regardless of an application account to which a user logs in. It is possible for a local attacker who controls the client process to dump it's memory, extract credentials and use them to gain a privileged access to t...

7.5CVSS5.7AI score0.00114EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•0 views

CVE-2026-21016: Undefined Security Weakness

Incorrect privilege assignment in LocationManager prior to SMR May-2026 Release 1 allows local attackers to access sensitive information...

5.5CVSS5.8AI score0.00093EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•4 views

CVE-2026-43510: Incorrect Privilege Assignment

manage.get.gov is the .gov TLD registrar maintained by CISA. manage.get.gov allows an organization administrator to assign domain manager privileges for domains not already in another organization. Fixed in 1.176.0 on or around 2026-04-30...

5.9CVSS5.8AI score0.00594EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/29 3:16 p.m.•21 views

CVE-2026-5141

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process. This issue affects Pardus Software Center: from 1.0.2 before 1.0.3...

8.8CVSS0.00409EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/04/29 12:59 a.m.•19 views

CVE-2026-22337

Incorrect Privilege Assignment vulnerability in Directorist Directorist Social Login allows Privilege Escalation.This issue affects Directorist Social Login: from n/a before 2.1.4...

9.8CVSS5.2AI score0.00321EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/29 12:00 a.m.•1 views

CVE-2026-5141: Improper Privilege Management

Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus Software Center allows Hijacking a privileged process. This issue affects Pardus Software Center: from 1.0.2 before 1.0.3...

8.8CVSS5.8AI score0.00409EPSS
SaveExploits0References4
Rows per page
Query Builder