CVE-2024-22922

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php...

Vistor Management System Security Vulnerability

Vistor Management System is a visitor management system. A security vulnerability exists in Projectworlds Vistor Management System version v.1.0, which stems from a vulnerability that allows a remote attacker to escalate privileges via a crafted script...

Coign CRM Portal Security Vulnerability

Coign CRM Portal is a customer relationship management system from Coign, Inc. A security vulnerability exists in Coign CRM Portal version v.06.06 that originates from allowing remote attackers to escalate privileges via the userPermissionsList parameter in the Session Storage component...

The vulnerability of the public_website() function in the Hostinger plugin for WordPress content management systems allows attackers to increase their privileges.

The vulnerability of the publicwebsite function in the Hostinger content management system’s WordPress plugin is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Policy Management component of the security monitoring and management tool Trend Micro Apex Central allows attackers to enhance their privileges.

The vulnerability of the Policy Management component of the security monitoring and management tool Trend Micro Apex Central is related to the lack of protective measures for the website structure. Exploiting this vulnerability can allow attackers who operate remotely to increase their privileges...

VulnCheck KEV: CVE-2019-25065

A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used...

The vulnerability of the FFmpeg multimedia library, related to deficiencies in access control, allows attackers to exploit their privileges.

The vulnerability of the FFmpeg multimedia library is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability in the web interface of the software for managing network infrastructure SINEC INS allows a perpetrator to enhance their privileges.

The vulnerability of the software web interface for managing SINEC INS network infrastructure is related to errors in the certificate validation process. Exploiting this vulnerability could allow an attacker, operating remotely, to enhance their privileges by intercepting requests sent to the UMC...

GHSA-FR29-W6J4-525F Jeecg Boot SQL Injection

SQL injection vulnerability in jeecg-boot v3.5.3, allows remote attackers to escalate privileges and obtain sensitive information via the component /sys/replicate/check...

CVE-2023-50569

Rejected reason: DO NOT USE THIS CVE RECORD. Consult IDs: CVE-2023-50250. Reason: This record is a reservation duplicate of CVE-2023-50250. Notes: All CVE users should reference CVE-2023-50250 instead of this record. All references and descriptions in this record have been removed to prevent...

UBUNTU-CVE-2023-50569

Reflected Cross Site Scripting XSS vulnerability in Cacti v1.2.25, allows remote attackers to escalate privileges when uploading an xml template file via templatesimport.php...

The vulnerability of the security system and the Nessus vulnerability assessment, which stems from insufficient validation of input data, allows attackers to elevate their privileges to the root or NT AUTHORITY/SYSTEM level on the Nessus host.

The vulnerability of the Nessus security system and its vulnerability assessment are related to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to elevate their privileges to the root or NT AUTHORITY/SYSTEM level on the Nessus...

CVE-2023-50477

An issue was discovered in nos client version 0.6.6, allows remote attackers to escalate privileges via getRPCEndpoint.js...

The vulnerability of the cloud-security-services-integration-library library of the development, integration, and application extension platform in the SAP Business Technology Platform (BTP) virtual environment allows a perpetrator to enhance their privileges.

The vulnerability of the cloud-security-services-integration-library library of the development, integration, and application extension platform in the SAP Business Technology Platform BTP environment is related to insecure management of privileges. Exploiting this vulnerability could allow a...

CVE-2023-49706

Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to escalate privileges, thereby allowing them to act as and with the permissions of another user. Attackers must generate repeated API requests to trigger a race condition with...

The vulnerability of the Windows Telephony Server server allows attackers to increase their privileges.

The vulnerability of the Windows Telephony Server server for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2023-40954

A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar aka webprogress v. 11.0 through 11.0.2, v12.0 through v12.0.2, v.13.0 through v13.0.2, v.14.0 through v14.0.2.1, v.15.0 through v15.0.2, and v16.0 through v16.0.2.1 allows a remote attacker to gain privileges via the recenc...

postgresql: Role pg_signal_backend can signal certain superuser processes.

A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would...

PT-2023-7775 · Microsoft · Windows Telephony Service +1

Name of the Vulnerable Software and Affected Versions: Windows Telephony Server affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Telephony Server, which can be exploited by a remote attacker to elevate their privileges. This can...

The vulnerability of the MetaDataBase.cpp component of the Android operating system, which allows attackers to increase their privileges

The vulnerability of the MetaDataBase.cpp component of the Android operating system is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...