EUVD-2019-9894

Malware in sbrugna...

ROS-20250923-06

A vulnerability in the Apache Cassandra distributed database management system is related to improper privilege handling. Exploitation of the vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and availability of protected information. impact the...

WAGO Coupler Series 安全漏洞

WAGO Coupler Series is a series of Ethernet interface modules from WAGO Japan. A security vulnerability exists in the WAGO Coupler Series that stems from improper handling of privileges, which could result in elevated privileges and firmware modifications...

CVE-2023-20516

CVE-2023-20516 involves improper handling of insufficiency privileges in the ASP, potentially allowing a privileged attacker to modify Translation Map Registers (TMRs) and affecting confidentiality or integrity. The provided sources indicate a network-based, high-privilege requirement with no use...

PT-2025-36376

Name of the Vulnerable Software and Affected Versions: ASP affected versions not specified Description: Improper handling of insufficient privileges in the ASP could allow a privileged attacker to modify Translation Map Registers TMRs, potentially resulting in loss of confidentiality or integrity...

The vulnerability of the distribution of the MiniOS operating system for ChromeOS, which allows a hacker to increase their privileges

The vulnerability of the MiniOS operating system for ChromeOS is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

OESA-2025-1902 ceph security update

Ceph is a massively scalable, open-source, distributed storage system that runs on commodity hardware and delivers object, block and file system storage. Security Fixes: A vulnerability classified as problematic has been found in Ceph up to 17.2.7/18.2.4/19.2.2.CWE is classifying the issue as...

MongoDB Server 安全漏洞

MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server versions v5.0 prior to 5.0.31, v6.0 prior to...

The vulnerability of the distributed database management system Apache Cassandra, related to improper handling of privileges, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the distributed database management system Apache Cassandra is related to improper handling of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-1999-0093

AIX nslookup command allows local users to obtain root access by not dropping privileges correctly...

SAMSUNG SMR 安全漏洞

SAMSUNG SMR is a system patch package from the South Korean company Samsung SAMSUNG. It provides patches for Samsung mobile applications. SAMSUNG SMR suffers from a security vulnerability that stems from mishandling of insufficient privileges, which could lead to the use of privileged APIs by a...

The vulnerability of the application software interface of the Cisco Meeting Management subsystem allows a perpetrator to escalate their privileges.

The vulnerability of the application programming interface of the Cisco Meeting Management subsystem relates to the improper handling of insufficient privileges. Exploiting this vulnerability allows a malicious actor to enhance their privileges through specially created requests...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Apr-2025 Release 1 prior to Release 1, which stems from improper handling of privileges...

The vulnerability of the NetScaler Console application delivery management service and the NetScaler Agent, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the NetScaler Console delivery management service and the NetScaler Agent agent is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2024-0105

NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure...

The vulnerability of the MQTT broker of Ruijie Reyee OS operating system allows a perpetrator to execute arbitrary commands.

The vulnerability of the MQTT broker operating system in Ruijie Reyee OS is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

HCL BigFix Inventory 安全漏洞

HCL BigFix Inventory is a software inventory from HCL USA. Maintaining software audits reduces security risks through software compliance and utilization management. HCL BigFix Inventory has a security vulnerability that stems from insufficient permissions or improper handling of privileges. An...

ClassCMS 安全漏洞

ClassCMS is a simple, flexible, secure and easy-to-expand content management system from China ClassCMS Open Source. A security vulnerability exists in ClassCMS version 4.8 and earlier versions, which stems from improper handling of insufficient privileges...

The vulnerability of the EVGA Precision X1 system’s software relates to the unsafe use of privileges, allowing a violator to increase their privileges.

The vulnerability of the EVGA Precision X1 system’s software relates to insecure handling of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to “NT AUTHORITY\SYSTEM” by associating \Device\PhysicalMemory with the calling process...

USN-7132-1 postgresql-12, postgresql-14, postgresql-16 vulnerabilities

It was discovered that PostgreSQL incorrectly tracked tables with row security. A remote attacker could possibly use this issue to perform forbidden reads and modifications. CVE-2024-10976 Jacob Champion discovered that PostgreSQL clients used untrusted server error messages. An attacker that is...