Lucene search
+L

1599 matches found

Positive Technologies
Positive Technologies
•added 2025/01/15 12:00 a.m.•6 views

PT-2025-4660

Name of the Vulnerable Software and Affected Versions WPExperts User Management versions 1.2 and earlier Description The issue is related to an incorrect privilege assignment, allowing privilege escalation. This problem affects WPExperts User Management, enabling potential attackers to gain highe...

8.8CVSS0.00434EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2025/01/15 12:00 a.m.•19 views

The vulnerability of the Registration role module in Drupal CMS systems, related to incorrect privilege assignment, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the Registration role module in Drupal CMS systems is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and enhance their privileges...

9CVSS5.5AI score0.00362EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2025/01/09 7:15 p.m.•19 views

CVE-2024-13251

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...

8.8CVSS0.00362EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/09 7:15 p.m.•35 views

CVE-2024-13248

Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...

5.5CVSS0.00189EPSS
SaveExploits0References1
CVE
CVE
•added 2025/01/09 6:53 p.m.•75 views

CVE-2024-13248

The Drupal Private content module (versions before 2.1.0 ) is vulnerable to an incorrect privilege assignment error. This flaw allows attackers to bypass security restrictions and gain unauthorized access to protected information, specifically by circumventing permissions intended for private nod...

5.5CVSS6.7AI score0.00189EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/01/09 6:53 p.m.•13 views

CVE-2024-13248 Private content - Moderately critical - Access bypass - SA-CONTRIB-2024-012

Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...

7AI score0.00189EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/01/09 6:53 p.m.•34 views

CVE-2024-13248 Private content - Moderately critical - Access bypass - SA-CONTRIB-2024-012

Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...

0.00189EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•3 views

CVE-2024-13251: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...

8.8CVSS5.8AI score0.00362EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/01/09 12:00 a.m.•14 views

Drupal 安全漏洞

Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Registration role prior to version 2.0.1, which stems from the inclusion of a privilege assignment error vulnerability...

8.8CVSS6.8AI score0.00362EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/09 12:00 a.m.•4 views

CVE-2024-13248: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...

5.5CVSS5.8AI score0.00189EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/08 12:00 a.m.•6 views

CVE-2024-13189: Incorrect Privilege Assignment

A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclos...

9.8CVSS5.3AI score0.0055EPSS
SaveExploits1References1
NVD
NVD
•added 2025/01/07 11:15 a.m.•11 views

CVE-2024-49644

Incorrect Privilege Assignment vulnerability in AllAccessible Accessibility by AllAccessible allaccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through = 1.3.4...

8.8CVSS0.00406EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/07 12:00 a.m.•2 views

CVE-2024-56280: Incorrect Privilege Assignment

Incorrect Privilege Assignment vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Privilege Escalation.This issue affects WPGuppy: from n/a through = 1.1.0...

8.8CVSS5.8AI score0.00406EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/01/07 12:00 a.m.•13 views

PT-2025-3243 · Wpguppy · Wpguppy

Name of the Vulnerable Software and Affected Versions: WPGuppy versions 1.1.0 and earlier Description: The issue is related to an incorrect privilege assignment in WPGuppy, allowing privilege escalation. Recommendations: For versions 1.1.0 and earlier, update to a version that fixes the incorrect...

8.8CVSS9.4AI score0.00406EPSS
SaveExploits0References6
BDU FSTEC
BDU FSTEC
•added 2025/01/06 12:00 a.m.•23 views

The vulnerability of the Kubernetes cluster management system for running cloud applications across multiple Karmada clusters, related to incorrect privilege assignment, allows a hacker to elevate their privileges.

The vulnerability of the Kubernetes cluster management system for running cloud applications across multiple Karmada clusters is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

9CVSS5.4AI score0.00491EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2024/12/31 2:15 p.m.•13 views

CVE-2024-56043

Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS allows Privilege Escalation.This issue affects WPLMS: from n/a through 1.9.9...

9.8CVSS7.3AI score0.00622EPSS
SaveExploits0References1
CVE
CVE
•added 2024/12/31 1:15 p.m.•79 views

CVE-2024-56043

CVE-2024-56043 concerns the WordPress plugin WPLMS by VibeThemes. The vulnerability is an Incorrect Privilege Assignment that allows unauthenticated privilege escalation in WPLMS versions up to 1.9.9. The root cause, as described in the sources, is a privilege assignment error. Impact is describe...

9.8CVSS7.4AI score0.00622EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2024/12/31 1:15 p.m.•31 views

CVE-2024-56071

Incorrect Privilege Assignment vulnerability in mikeleembruggen Simple Dashboard simple-dashboard allows Privilege Escalation.This issue affects Simple Dashboard: from n/a through = 2.0...

9.8CVSS0.0064EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/31 1:15 p.m.•28 views

CVE-2024-56205

Incorrect Privilege Assignment vulnerability in SunnyKai AI Magic newsletter-page-redirects allows Privilege Escalation.This issue affects AI Magic: from n/a through = 1.0.4...

9.8CVSS0.0064EPSS
SaveExploits0References1
Prion
Prion
•added 2024/12/31 1:15 p.m.•22 views

CVE-2024-56205

Incorrect Privilege Assignment vulnerability in AI Magic allows Privilege Escalation.This issue affects AI Magic: from n/a through 1.0.4...

0.0064EPSS
SaveExploits0References1
Rows per page
Query Builder