5235 matches found
CVE-2025-49084
CVE-2025-49084 affects Absolute Secure Access management console prior to version 13.56. An administrator can overwrite policy rules without permissions due to a privilege-bypass issue (low integrity impact). Initial and connected sources describe high subsequent-system impact on confidentiality ...
Commvault for Windows 安全漏洞
Commvault for Windows is a data backup, recovery software from Commvault Inc. in the United States. A security vulnerability exists in Commvault for Windows versions 11.20.0, 11.28.0, 11.32.0, 11.34.0, and 11.36.0, which stems from an elevation of privilege that could lead to unauthorized access...
WordPress bSecure plugin elevation of privilege vulnerability
WordPress bSecure plugin is a plugin used to enhance the security of the website, mainly for the payment page of GiveWP to provide security features. An elevation of privilege vulnerability exists in the WordPress bSecure plugin, which stems from a lack of authorization in the orderinfo REST...
WordPress plugin Platform 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...
SolarWinds Observability Self-Hosted 代码问题漏洞
SolarWinds Observability Self-Hosted is an observation platform from US-based SolarWinds. A code issue vulnerability exists in SolarWinds Observability Self-Hosted that stems from untrustworthy data deserialization, which could lead to local elevation of privilege...
ASUSTOR Backup Plan 安全漏洞
ASUSTOR Backup Plan ABP is a Windows backup tool from Hua Yun Technology ASUSTOR Inc. of Taipei, China. A security vulnerability exists in ASUSTOR Backup Plan version 2.0.7.6130 and earlier and AES version 1.0.6.6133 and earlier, which stems from an unquoted ImagePath registry value that could le...
Lastore Daemon 安全漏洞
Lastore Daemon is an open source application from Wuhan deepin Technology Co.,Ltd. A security vulnerability exists in Lastore Daemon version 0.9.53-1 and 0.9.66-1, which stems from improper privilege management and could lead to local elevation of privilege...
CLSA-2025-1753207513 pam: Fix of CVE-2025-6020
CVE-2025-6020: privilege elevation to root via multiple symlink attacks and race conditions - Perform regression testing...
The vulnerability of the GoldenDB database management system, related to insecure privilege management, allows attackers to elevate their privileges.
The vulnerability of the GoldenDB database management system is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Microsoft Graphics Component elevation of privilege vulnerability (CNVD-2025-17137)
Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA. A security vulnerability exists in Microsoft Graphics Component. An attacker could exploit the vulnerability to elevate privileges...
CVE-2025-47158
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-47158
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-49746 Azure Machine Learning Elevation of Privilege Vulnerability
...
Azure DevOps Server Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data in Azure DevOps allows an unauthorized attacker to elevate privileges over a network...
Microsoft Azure Machine Learning 安全漏洞
Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...
Microsoft Azure Machine Learning 安全漏洞
Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...
One Identity Password Manager 安全漏洞
One Identity Password Manager is a web platform for providing authentication from One Identity, Inc. in the United States. A security vulnerability exists in One Identity Password Manager versions prior to 5.14.4, which stems from a flaw in the security hardening mechanism in the Secure Password...
Shenzhen Liandian Communication Technology V380 IP Camera 安全漏洞
Shenzhen Liandian Communication Technology V380 IP Camera is a camera from Shenzhen Liandian Communication Technology. A security vulnerability exists in the Shenzhen Liandian Communication Technology V380 IP Camera AppFHE1V1.0.6.0 version, which stems from the default enablement of Telnet servic...