K000149092: PostgreSQL vulnerability CVE-2024-10978

Security Advisory Description Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended. An attack requires the application to use SET ROLE, SET SESSION AUTHORIZATION, or an equivalent feature. The problem arises wh...

PT-2024-36678

Name of the Vulnerable Software and Affected Versions WPLMS versions 1.9.9 and earlier Description The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation. This vulnerability affects the VibeThemes WPLMS plugin. Recommendations For versions 1.9.9...

GO-2024-3354 Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad

Hashicorp Nomad Incorrect Privilege Assignment vulnerability in github.com/hashicorp/nomad...

Adobe Substance 3D Modeler Pointer Assignment DoS

The vulnerability of the Adobe Substance 3D Modeler software for 3D modeling is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2024-54383

Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a before 4.9.9...

CVE-2024-54383

Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.9...

CVE-2024-54383: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in wpweb WooCommerce PDF Vouchers woocommerce-pdf-vouchers allows Privilege Escalation.This issue affects WooCommerce PDF Vouchers: from n/a through 4.9.9...

CVE-2024-9779: Incorrect Privilege Assignment

A flaw was found in Open Cluster Management OCM when a user has access to the worker nodes which contain the cluster-manager or klusterlet deployments. The cluster-manager deployment uses a service account with the same name "cluster-manager" which is bound to a ClusterRole also named...

CVE-2024-54229

Incorrect Privilege Assignment vulnerability in straightvisions GmbH SV100 Companion sv100-companion allows Privilege Escalation.This issue affects SV100 Companion: from n/a through = 2.0.02...

CVE-2024-54365

CVE-2024-54365: KH Easy User Settings suffers an Authenticated Privilege Escalation (Authenticated Subscriber+) caused by Incorrect Privilege Assignment, affecting KH Easy User Settings up to version 1.0.0. CVSS v3.1 base score 8.8 (HIGH); impacts: confidentiality, integrity, and availability. Af...

PT-2024-36107 · Unknown · Sv100 Companion

Name of the Vulnerable Software and Affected Versions: SV100 Companion versions n/a through 2.0.02 Description: The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation. This can lead to unauthorized access and control. Recommendations: For versions n/a through...

PT-2024-36251 · Unknown · Halim Kh Easy User Settings

Name of the Vulnerable Software and Affected Versions: Halim KH Easy User Settings versions n/a through 1.0.0 Description: The issue is related to an Incorrect Privilege Assignment, which allows Privilege Escalation. Recommendations: For Halim KH Easy User Settings versions n/a through 1.0.0, at...

WordPress plugin SV100 Companion 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

I-O Data Device UD-LT1/EX Permission Bypass

The vulnerability of the I-O Data Device UD-LT1 and UD-LT1/EX router microprogramming software is related to the improper assignment of permissions for critical resources. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

CVE-2024-54363: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in saiful.total Wp NssUser Register wp-nssuser-register allows Privilege Escalation.This issue affects Wp NssUser Register: from n/a through = 1.0.0...

CVE-2024-54365: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Knowhalim KH Easy User Settings kh-easy-user-settings allows Privilege Escalation.This issue affects KH Easy User Settings: from n/a through = 1.0.0...

CVE-2024-54293

Incorrect Privilege Assignment vulnerability in CE21 CE21 Suite ce21-suite allows Privilege Escalation.This issue affects CE21 Suite: from n/a through = 2.2.0...

CVE-2024-54293

CVE-2024-54293 is an authenticated-privilege-escalation issue reported in the CE21 Suite (CE21 CE21 Suite) affecting versions from n/a up to 2.2.0. The vulnerability allows privilege escalation without authentication. The CVSS score in the initial report is 9.8 (Network, High confidentiality/inte...

WordPress plugin CE21 Suite 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-36174 · Unknown · Ce21 Suite

Name of the Vulnerable Software and Affected Versions: CE21 Suite versions n/a through 2.2.0 Description: The issue is related to an Incorrect Privilege Assignment vulnerability, which allows Privilege Escalation in CE21 Suite. Recommendations: For versions n/a through 2.2.0, at the moment, there...