4520 matches found
CVE-2025-12485
Improper privilege management during pre-MFA cookie handling in Devolutions Server allows a low-privileged authenticated user to impersonate another account by replaying the pre-MFA cookie.This does not bypass the target account MFA verification step. This issue affects the following versions :...
Devolutions Server 安全漏洞
Devolutions Server is an application from Devolutions Canada Inc. It provides a full-featured shared account and password management solution. A security vulnerability exists in Devolutions Server version 2025.3.5.0 and earlier, which stems from improper privilege management during pre-MFA cookie...
The vulnerability of Moxa’s network device software-related microprogramming systems, related to errors in privilege management, allows attackers to escalate their privileges.
The vulnerability of Moxa network device software-based microprograms is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of Moxa network device software of the EDR-G9010, EDR-8010, EDF-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4 series is related to errors in privilege management. This vulnerability allows attackers to compromise the confidentiality and accessibility of protected information.
The vulnerability of Moxa network devices with microprogrammed software, such as EDR-G9010, EDR-8010, EDG-G1002-BP, TN-4900, NAT-102, NAT-108, and OnCell G4302-LTE4, is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...
The vulnerability of Moxa’s network device software, related to errors in privilege management, allows a hacker to gain full control over the device.
The vulnerability of Moxa network device software-related microprograms is related to errors in privilege management. Exploiting this vulnerability can allow a malicious actor to gain full control over the device remotely...
ROS-20251020-03
Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...
EUVD-2025-34755
An improper privilege management vulnerability exists in WSO2 API Manager due to missing authentication and authorization checks in the keymanager-operations Dynamic Client Registration DCR endpoint. A malicious user can exploit this flaw to generate access tokens with elevated privileges,...
VulnCheck KEV: CVE-2023-20598
An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution...
EUVD-2020-17885
Malware in sbrugna...
EUVD-2018-9695
Malware in sbrugna...
EUVD-2005-4699
Malware in sbrugna...
EUVD-2021-12325
Malware in sbrugna...
EUVD-2017-11118
Malware in sbrugna...
EUVD-2017-11119
Malware in sbrugna...
EUVD-2017-1273
Malware in sbrugna...
EUVD-2017-1271
Malware in sbrugna...
EUVD-2021-27067
Malware in sbrugna...
EUVD-2021-12404
Malware in sbrugna...