1599 matches found
PT-2025-4660
Name of the Vulnerable Software and Affected Versions WPExperts User Management versions 1.2 and earlier Description The issue is related to an incorrect privilege assignment, allowing privilege escalation. This problem affects WPExperts User Management, enabling potential attackers to gain highe...
The vulnerability of the Registration role module in Drupal CMS systems, related to incorrect privilege assignment, allows attackers to bypass security restrictions and enhance their privileges.
The vulnerability of the Registration role module in Drupal CMS systems is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and enhance their privileges...
CVE-2024-13251
Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...
CVE-2024-13248
Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...
CVE-2024-13248
The Drupal Private content module (versions before 2.1.0 ) is vulnerable to an incorrect privilege assignment error. This flaw allows attackers to bypass security restrictions and gain unauthorized access to protected information, specifically by circumventing permissions intended for private nod...
CVE-2024-13248 Private content - Moderately critical - Access bypass - SA-CONTRIB-2024-012
Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...
CVE-2024-13248 Private content - Moderately critical - Access bypass - SA-CONTRIB-2024-012
Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...
CVE-2024-13251: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Drupal Registration role allows Privilege Escalation.This issue affects Registration role: from 0.0.0 before 2.0.1...
Drupal 安全漏洞
Drupal is an open source content management system developed in the PHP language by the Drupal community. A security vulnerability exists in Drupal Registration role prior to version 2.0.1, which stems from the inclusion of a privilege assignment error vulnerability...
CVE-2024-13248: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in Drupal Private content allows Target Influence via Framing.This issue affects Private content: from 0.0.0 before 2.1.0...
CVE-2024-13189: Incorrect Privilege Assignment
A vulnerability classified as critical has been found in ZeroWdd myblog 1.0. This affects an unknown part of the file src/main/java/com/wdd/myblog/config/MyBlogMvcConfig.java. The manipulation leads to permission issues. It is possible to initiate the attack remotely. The exploit has been disclos...
CVE-2024-49644
Incorrect Privilege Assignment vulnerability in AllAccessible Accessibility by AllAccessible allaccessible allows Privilege Escalation.This issue affects Accessibility by AllAccessible: from n/a through = 1.3.4...
CVE-2024-56280: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Privilege Escalation.This issue affects WPGuppy: from n/a through = 1.1.0...
PT-2025-3243 · Wpguppy · Wpguppy
Name of the Vulnerable Software and Affected Versions: WPGuppy versions 1.1.0 and earlier Description: The issue is related to an incorrect privilege assignment in WPGuppy, allowing privilege escalation. Recommendations: For versions 1.1.0 and earlier, update to a version that fixes the incorrect...
The vulnerability of the Kubernetes cluster management system for running cloud applications across multiple Karmada clusters, related to incorrect privilege assignment, allows a hacker to elevate their privileges.
The vulnerability of the Kubernetes cluster management system for running cloud applications across multiple Karmada clusters is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2024-56043
Incorrect Privilege Assignment vulnerability in VibeThemes WPLMS allows Privilege Escalation.This issue affects WPLMS: from n/a through 1.9.9...
CVE-2024-56043
CVE-2024-56043 concerns the WordPress plugin WPLMS by VibeThemes. The vulnerability is an Incorrect Privilege Assignment that allows unauthenticated privilege escalation in WPLMS versions up to 1.9.9. The root cause, as described in the sources, is a privilege assignment error. Impact is describe...
CVE-2024-56071
Incorrect Privilege Assignment vulnerability in mikeleembruggen Simple Dashboard simple-dashboard allows Privilege Escalation.This issue affects Simple Dashboard: from n/a through = 2.0...