2211 matches found
Rockwell Automation ThinManager ThinServer
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/Low attack complexity Vendor : Rockwell Automation Equipment : ThinManager ThinServer Vulnerabilities : Improper Privilege Management, Incorrect Permission Assignment for Critical Resource, Improper Input Validation 2...
PT-2024-31103 · Menulux Information Technologies · Menulux Information Technologies Managment Portal
Name of the Vulnerable Software and Affected Versions: Menulux Information Technologies Managment Portal versions through 21.05.2024 Description: The issue is related to Improper Privilege Management, allowing the collection of data as provided by users. Recommendations: For Menulux Information...
CVE-2024-4555
Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...
CVE-2024-4555: Incorrect Privilege Assignment
Improper Privilege Management vulnerability in OpenText NetIQ Access Manager allows user account impersonation in specific scenario. This issue affects NetIQ Access Manager before 5.0.4.1 and before 5.1...
CVE-2024-36439: Improper Privilege Management
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain access to the administrative web interface via the device password's hash value, without knowing the actual device password...
CVE-2024-20466: Incorrect Privilege Assignment
A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to obtain sensitive information from an affected device. This vulnerability is due to improper enforcement of administrative privilege levels for high-value...
CVE-2020-11846: Improper Privilege Management
A vulnerability found in OpenText Privileged Access Manager that issues a token. on successful issuance of the token, a cookie gets set that allows unrestricted access to all the application resources. This issue affects Privileged Access Manager before 3.7.0.1...
CVE-2024-43311 WordPress Login As Users plugin <= 1.4.2 - Broken Authentication vulnerability
Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2...
CVE-2024-43245
Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4...
CVE-2024-43240
Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...
CVE-2024-43240
Improper Privilege Management vulnerability in azzaroco Ultimate Membership Pro allows Privilege Escalation.This issue affects Ultimate Membership Pro: from n/a through 12.6...
CVE-2024-43245 WordPress JobSearch plugin <= 2.3.4 - Unauthenticated Account Takeover vulnerability
Improper Privilege Management vulnerability in eyecix JobSearch allows Privilege Escalation.This issue affects JobSearch: from n/a through 2.3.4...
CVE-2024-43245
CVE-2024-43245 affects the WordPress plugin JobSearch (WP Job Board). The issue is an Improper Privilege Management that enables an Authentication Bypass to Account Takeover , potentially allowing an attacker to gain control of user accounts. Affected scope: JobSearch versions from n/a up to and ...
CVE-2024-43240 WordPress Indeed Ultimate Membership Pro plugin <= 12.7 - Unauthenticated Privilege Escalation vulnerability
Improper Authentication vulnerability in azzaroco Ultimate Membership Pro indeed-membership-pro.This issue affects Ultimate Membership Pro: from n/a through = 12.7...
CVE-2024-44076: Improper Privilege Management
In Microcks before 1.10.0, the POST /api/import and POST /api/export endpoints allow non-administrator access...
CVE-2024-43401: Improper Privilege Management
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A user without script/programming right can trick a user with elevated rights to edit a content with a malicious payload using a WYSIWYG editor. The user with elevated rights is not warned...
CVE-2024-43311: Improper Privilege Management
Improper Privilege Management vulnerability in Geek Code Lab Login As Users allows Privilege Escalation.This issue affects Login As Users: from n/a through 1.4.2...
PT-2024-30478 · Geek Code · Geek Code Lab Login As Users
Name of the Vulnerable Software and Affected Versions: Geek Code Lab Login As Users versions 1.4.2 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation. This can be exploited in the Login As Users feature. Recommendations: For versions 1.4....
CVE-2024-42995: Improper Privilege Management
VTiger CRM = 8.1.0 does not correctly check user privileges. A low-privileged user can interact directly with the "Migration" administrative module to disable arbitrary modules...