1037 matches found
PT-2024-12429 · Leyka · Leyka
Name of the Vulnerable Software and Affected Versions: Leyka versions 3.30.2 and earlier Description: The issue is related to Improper Privilege Management, which allows Privilege Escalation in Leyka. Recommendations: For Leyka versions 3.30.2 and earlier, at the moment, there is no information...
CVE-2024-27796
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.8 and iPadOS 16.7.8, iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7. An attacker may be able to elevate privileges...
RHEL 5 : net-snmp (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - net-snmp: Heap corruption in snmppduparse function in snmplib/snmpapi.c CVE-2018-1000116 - Net-SNMP throu...
CVE-2024-3507 Privilege escalation vulnerability in Lunar
Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...
CVE-2024-3507 Privilege escalation vulnerability in Lunar
Improper privilege management vulnerability in Lunar software that affects versions 6.0.2 through 6.6.0. This vulnerability allows an attacker to perform a secondary process injection into the Lunar application and abuse those rights to access sensitive user information...
PT-2024-26306 · Lunar · Lunar
Name of the Vulnerable Software and Affected Versions: Lunar software versions 6.0.2 through 6.6.0 Description: The issue is related to improper privilege management in the Lunar software, allowing an attacker to perform a secondary process injection into the application. This can lead to the abu...
Oracle VirtualBox vboxdrv Improper Privilege Management Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of Oracle VirtualBox. An attacker must first obtain the ability to execute low-privileged code on the target host system in order to exploit this vulnerability. The specific flaw exists within the vboxdrv...
CVE-2023-51425
Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Rencontre – Dating Site: from n/a through 3.10.1...
CVE-2023-51425 WordPress Rencontre plugin <= 3.10.1 - Unauthenticated Account Takeover vulnerability
Improper Privilege Management vulnerability in Jacques Malgrange Rencontre – Dating Site allows Privilege Escalation.This issue affects Rencontre – Dating Site: from n/a through 3.10.1...
PT-2024-14123 · Unknown · Rencontre – Dating Site
Name of the Vulnerable Software and Affected Versions: Rencontre – Dating Site versions 3.10.1 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation. Recommendations: For versions 3.10.1 and earlier, update to a version that contains a fix f...
CVE-2024-4017
BeyondTrust U-Series Appliance (Windows, 64-bit filesystem modules) is affected by CVE-2024-4017 due to improper privilege management allowing DLL side-loading. Affected versions are 3.4 through prior to 4.0.3; remediation is to upgrade to version 4.0.3 or later. Some sources confirm the vulnerab...
CVE-2024-4018 Privilege Escalation in U-Series Appliance
Improper Privilege Management vulnerability in BeyondTrust U-Series Appliance on Windows, 64 bit local appliance api modules allows Privilege Escalation.This issue affects U-Series Appliance: from 3.4 before 4.0.3...
CVE-2024-4018
CVE-2024-4018 is an improper privilege management vulnerability in BeyondTrust U-Series Appliance on Windows (64-bit local appliance API modules) that allows privilege escalation. Affected versions are 3.4 through before 4.0.3; the issue is mitigated by upgrading to 4.0.3 or later. The CVE’s docu...
PT-2024-4850
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 Description: The issue is related to improper privilege management in the operating system, which could allow a local high privilege attacker to potentially exploit this vulnerability,...
Improper Privilege Management
winter/wn-dusk-plugin is vulnerable to Improper Privilege Management. The vulnerability is due to the exposure of a route URL/dusk/login/USER ID/MANAGER that allows unauthenticated access to user accounts in Winter CMS instances with the Dusk plugin installed and configured improperly...
Huawei HarmonyOS and EMUI Denial of Service Vulnerability (CNVD-2024-31528)
Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A denial of service vulnerability exists in Huawei...
TOTOLINK EX200 getSysStatusCfg Method Information Disclosure Vulnerability
TOTOLINK EX200 is a wireless N range extender from China Gion Electronics TOTOLINK , which is mainly used to extend the coverage of the existing Wi-Fi network and solve the problem of signal blind zones. TOTOLINK EX200 suffers from an information disclosure vulnerability that stems from improper...
Zoom Client 安全漏洞
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom Client versions prior to 5.17.10 that stems from improper privilege management and could allow privileged users to escalate privileges via local access...
Siemens RUGGEDCOM APE1808
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...