5924 matches found
SUSE CVE-2025-9864
This CVE ID was assigned in error to a vulnerability that was both introduced and fixed before the code landed in the Stable channel of Chrome, and has been withdrawn...
CVE-2024-32444
Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation.This issue affects RealHomes: from n/a through 4.3.6...
CVE-2024-32444 WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes realhomes allows Privilege Escalation.This issue affects RealHomes: from n/a through = 4.3.6...
CVE-2024-32444
CVE-2024-32444 affects WordPress RealHomes Theme by InspiryThemes, up to version 4.3.6. Root cause: Incorrect Privilege Assignment. Impact: could enable privilege escalation and potentially take control of a WordPress site. Remediation: upgrade to RealHomes 4.3.7 or later (vendor fix) per multipl...
CVE-2024-32444 WordPress RealHomes theme <= 4.3.6 - Privilege Escalation vulnerability
Incorrect Privilege Assignment vulnerability in InspiryThemes RealHomes allows Privilege Escalation.This issue affects RealHomes: from n/a through 4.3.6...
WordPress plugin RealHomes 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-52494
The Adacore Ada Web Server (AWS) before version 25.2 is vulnerable to a denial-of-service (DoS) condition due to improper handling of SSL handshakes during connection initialization. Because the server lacks a specific timeout for this phase and relies on an effectively infinite default socket ti...
IBM Transformation Advisor 安全漏洞
IBM Transformation Advisor is an application modernization separation and migration assessment tool from International Business Machines IBM. A security vulnerability exists in IBM Transformation Advisor versions 2.0.1 through 4.3.1, which stems from an improper assignment of privileges and could...
Linux Distros Unpatched Vulnerability : CVE-2017-2578
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 3.x, there is XSS in the assignment submission page. CVE-2017-2578 Note that Nessus relies on the presence of the package as reported by the vendor...
The vulnerability of the Microsoft SQL Server database management system, related to incorrect privilege assignment, allows a perpetrator to escalate their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
kernel: vsock: Fix transport_* TOCTOU
In the Linux kernel, the following vulnerability has been resolved: vsock: Fix transport TOCTOU Transport assignment may race with module unload. Protect newtransport from becoming a stale pointer. This also takes care of an insecure call in vsockuselocaltransport; add a lockdep assert. BUG: unab...
The vulnerability of the NGINX Proxy Manager, a proxy server for managing hosts, arises from errors in restricting token assignment, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the NGINX Proxy Manager, a proxy server for managing hosts, is related to errors in restricting the assignment of security tokens. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2025-49388
Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through = 2.0.7...
ROS-20250829-06
Vault Enterprise and Vault Community Edition enterprise data archiving platforms have a vulnerability due to incorrect privilege assignment. Edition is related to incorrect privilege assignment. Exploitation of the vulnerability could allow an attacker acting remotely to escalate privileges to ro...
CVE-2025-48348
Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...
CVE-2025-49388
CVE-2025-49388 affects WordPress Miraculous Core Plugin up to version 2.0.7, where an Incorrect Privilege Assignment allows Privilege Escalation. The CVE details indicate the vulnerability originates from the plugin’s privilege assignment logic, impacting all affected builds (n/a–2.0.7) with high...
CVE-2025-49388: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin: from n/a through = 2.0.7...
WordPress plugin Miraculous Core Plugin 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
CVE-2025-48348: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in chandrashekharsahu Site Offline site-offline allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Site Offline: from n/a through = 1.5.7...
JetBrains IDE Services 安全漏洞
JetBrains IDE Services is a software from the Czech company JetBrains for managing JetBrains' development tools and AI features. A security vulnerability exists in JetBrains IDE Services versions prior to 2025.5.0.1086 and prior to 2025.4.2.2164, which stems from an improper assignment of...