37661 matches found
CVE-2025-55736 flaskBlog allows arbitrary privilege escalation
flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges e.g. delete users, posts, comments etc.. The problem is in the routes/adminPanelUsers file...
CVE-2025-55736 flaskBlog allows arbitrary privilege escalation
flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, an arbitrary user can change his role to "admin", giving its relative privileges e.g. delete users, posts, comments etc.. The problem is in the routes/adminPanelUsers file...
wordpress plugin FunnelKit – Funnel Builder for WooCommerce Checkout和wordpress plugin FunnelKit Automations 信息泄露漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... An information disclosur...
aiven-db-migrate 路径遍历漏洞
aiven-db-migrate is an Aiven open source application. A path traversal vulnerability exists in aiven-db-migrate versions prior to 1.0.7, which stems from an elevation of privilege vulnerability that could lead to superuser privilege acquisition...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a missing input validation and could lead to local elevation of privilege...
Capsule 安全漏洞
Capsule is a multi-tenant and policy-based framework for Kubernetes open-sourced by Project Capsule. A security vulnerability exists in Capsule 0.10.3 and earlier versions that stems from a namespace label injection vulnerability that could lead to elevation of privilege and cross-tenant resource...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from improper input validation and could result in local elevation of privilege...
Schneider Electric SESU 后置链接漏洞
Schneider Electric SESU is a module for optimizing the efficiency of energy usage from Schneider Electric France. A backlink vulnerability exists in Schneider Electric SESU that stems from improper link resolution and could result in elevation of privilege or denial of service...
📄 Microsoft SQL Server 2016 / 2017 / 2019 / 2022 Privilege Escalation
Microsoft SQL Server versions 2016, 2017, 2019, and 2022 suffer from a database privilege escalation vulnerability from ALTER ANY LOGIN To SYSADMIN. Title: MSSQL Database Privilege Elevation From ALTER ANY LOGIN To SYSADMIN Product: Microsoft SQL Server Vendor: Microsoft Affected Versions: SQL...
Linux Distros Unpatched Vulnerability : CVE-2023-3893
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin...
WordPress plugin Taxi Booking Manager for Woocommerce | E-cab 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exist...
Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2025-24452)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
OpenBao has an unspecified vulnerability (CNVD-2025-18597)
OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause elevation of privilege...
TRENDnet TEW-822DRE Elevation of Privilege Vulnerability
The TRENDnet TEW-822DRE is a dual-band wireless router from TRENDnet. The TRENDnet TEW-822DRE suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...
WordPress Eventin plugin elevation of privilege vulnerability
WordPress Eventin plugin is an event management plugin designed for WordPress that supports event creation, registration, ticketing and calendar synchronization for offline, online and mixed event management. An elevation of privilege vulnerability exists in WordPress Eventin plugin, which stems...
HP Hotkey Support 安全漏洞
HP Hotkey Support is an application from Hewlett-Packard HP USA. A security vulnerability exists in HP Hotkey Support, which originates from the HPAudioAnalytics service and may allow elevation of privilege...
Security Updates for Azure File Sync Agent (August 2025)
The Microsoft Azure File Sync Agent running on the remote host is prior to 18.3, 19.x prior to 19.2, 20.x prior to 20.1, or 21.x prior to 21.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2025-50168
Access of resource using incompatible type 'type confusion' in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally...