The vulnerability of the systemd service initialization and management subsystem, related to improper privilege assignment, allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the systemd service initialization and management subsystem is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

Improper Privilege Management in delgan/loguru

BUG ======== unprivileged user can see log file and sensitive information disclosed SUMMURY ============ loguru create log file to store the log . Log may contain many sentsitive information like username,password,token,key etc .\ So, this log file should not accessed by other user .\ But when...

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

DEBIAN-CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

UBUNTU-CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

Input validation

shelljs is vulnerable to Improper Privilege Management...

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

CVE-2022-0144

shelljs is vulnerable to Improper Privilege Management...

SUSE SLES12: libsnmp30 / libsnmp30-32bit / net-snmp / net-snmp-devel / perl-SNMP / etc (SUSE-SU-2022:0030-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0030-1 advisory. - CVE-2020-15862: Make extended MIB read-only bsc1174961 Tenable has extracted the preceding description block directly from the SUSE securi...

CVE-2021-39982

Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notifications...

Design/Logic Flaw

Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notifications...

CVE-2021-39982

CVE-2021-39982 concerns Huawei HarmonyOS’ Phone Manager application. The vulnerability is described as improper privilege management that could allow an attacker to read and write arbitrary files by tampering with Phone Manager notifications. The CVSS 3.1 vector indicates a network-exposed issue ...

SUSE SLES15 Security Update : net-snmp (SUSE-SU-2021:4191-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:4191-1 advisory. - CVE-2020-15862: Make extended MIB read-only bsc1174961 Tenable has extracted the preceding description block directly from the SUSE securi...

PT-2021-7041

Name of the Vulnerable Software and Affected Versions shelljs affected versions not specified Description The issue is related to Improper Privilege Management in the shelljs function exec, which is associated with insufficient access control. Exploitation of this issue may allow an attacker to...

CVE-2021-44159 4MOSAn GCB Doctor - Unrestricted Upload of File

4MOSAn GCB Doctor’s file upload function has improper user privilege control. A remote attacker can upload arbitrary files including webshell files without authentication and execute arbitrary code in order to perform arbitrary system operations or deny of service attack...

CVE-2021-43828 Improper Privilege Management in Patrowl

PatrOwl is a free and open-source solution for orchestrating Security Operations. In versions prior to 1.77 an improper privilege management IDOR has been found in PatrowlManager. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format o...

Improper Privilege Management in patrowl/patrowlmanager

Description Hi there, I would like to report an improper privilege management in PatrowlManager - it's an IDOR. All imports findings file is placed under /media/imports// In that, ownerid is predictable and tmpfile is in format of import, for example: import11639213059582.json This filename is...

CVE-2021-25513

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen...

CVE-2021-25513

An improper privilege management vulnerability in Apps Edge application prior to SMR Dec-2021 Release 1 allows unauthorized access to some device data on the lockscreen...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS Wearables, an electronic watch from Huawei of China Huawei, is vulnerable to an improper privilege management vulnerability in the Huawei HarmonyOS Wearables cellular module. An attacker could exploit this vulnerability to cause confidentiality to be compromised...