1037 matches found
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...
CVE-2025-8453
CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation and arbitrary code execution when a privileged engineer user with console access modifies a configuration file used by a root-level daemon to execute custom scripts...
DELL Data Lakehouse Improper Privilege Control Vulnerability
DELL Data Lakehouse is an all-in-one solution from Dell Technologies that combines the advantages of Data Warehouse and Data Lake to provide a unified, flexible and high-performance data storage and processing platform. DELL Data Lakehouse suffers from an improper privilege control vulnerability...
PT-2025-34135 · Manageengine · Assetexplorer +3
Name of the Vulnerable Software and Affected Versions: Asset Explorer versions prior to 7710 ServiceDesk Plus versions prior to 15110 ServiceDesk Plus MSP versions prior to 14940 SupportCenter Plus versions prior to 14940 Description: An improper privilege management issue exists in ManageEngine'...
PT-2025-34053 · Unknown · Root-Level Daemon
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A CWE-269: Improper Privilege Management issue exists that may lead to privilege escalation and arbitrary code execution. This occurs when a privileged engineer user with console access modifies a...
WordPress plugin DELUCKS SEO 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...
Schneider Electric Saitel DR RTU 安全漏洞
The Schneider Electric Saitel DR RTU is a remote terminal device from Schneider Electric France. A security vulnerability exists in the Schneider Electric Saitel DR RTU that stems from improper privilege management and could lead to elevation of privilege and arbitrary code execution...
Intel AI Playground Improper Privilege Vulnerability
Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...
Exploit for Improper Privilege Management in Najeebmedia Simple_User_Registration
CVE-2025-4334 - Simple User Registration --form Argum...
Security Bulletin: Kafka client library upgraded to kafka-clients-3.9.1
Summary Kafka client library upgraded to kafka-clients-3.9.1. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apache Kafka Clients accept configuration data for...
CVE-2025-21010
Improper privilege management in SamsungAccount prior to SMR Aug-2025 Release 1 allows local privileged attackers to deactivate Samsung account...
XORUX LPAR2RRD 安全漏洞
XORUX LPAR2RRD is a server performance monitoring platform from the Czech company XORUX. A security vulnerability exists in XORUX LPAR2RRD that stems from improper privilege management and could lead to process termination...
Security Bulletin: IBM® Db2® is affected by a vulnerability in the hadoop-common library (CVE-2024-23454).
Summary IBM® Db2® is vulnerable to an issue in Apache Hadoop which could allow a local authenticated attacker to access sensitive information. Vulnerability Details CVEID:CVE-2024-23454 DESCRIPTION: Apache Hadoop could allow a local authenticated attacker to obtain sensitive information, caused b...
WordPress The E-Commerce ERP Elevation of Privilege Vulnerability
WordPress The E-Commerce ERP is a comprehensive management system designed for small and medium-sized enterprises, integrating financial management, human resources management, procurement management, sales management, inventory management and production management, helping enterprises to optimiz...
The vulnerability of Palo Alto Networks Cortex, a cloud-based security platform, allows attackers to elevate their privileges to the root level.
The vulnerability of the virtual machine on Palo Alto Networks Cortex XDR Broker VM in cloud security platforms is related to improper privilege assignment. Exploiting this vulnerability can allow attackers to elevate their privileges to a root level...
WordPress plugin The E-Commerce ERP 安全漏洞
WordPress The E-Commerce ERP is a comprehensive management system designed for small and medium-sized enterprises, integrating financial management, human resources management, procurement management, sales management, inventory management and production management, helping enterprises to optimiz...
CVE-2025-50124
A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a setup script...
PT-2025-29225 · Apache · Apache Server
Name of the Vulnerable Software and Affected Versions: Apache Server affected versions not specified Description: An Improper Privilege Management issue exists that could allow privilege escalation when the server is accessed by a privileged account via a console and through exploitation of a set...
Wing FTP Server 安全漏洞
Wing FTP Server is a suite of cross-platform FTP server software open-sourced by Wing FTP Server. A security vulnerability exists in Wing FTP Server 7.4.4 and earlier versions, which stems from improper privilege management and may result in elevated privileges...
