4654 matches found
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
Input validation
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
Huawei FusionCompute Information Disclosure Vulnerability (CNVD-2020-47548)
Huawei FusionCompute is a computer virtualization engine from Huawei China. The product provides Virtual Resource Manager VRM and Compute Node Agent CNA, among others. An information disclosure vulnerability exists in Huawei FusionCompute version 8.0.0, which stems from the module's failure to...
The vulnerability of the Schneider Electric Modbus Serial Driver and Schneider Electric Modbus Driver Suite, related to insecure management of privileges, allows attackers to escalate their privileges.
The vulnerability of the Schneider Electric Modbus Serial Driver and Schneider Electric Modbus Driver Suite lies in the insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
CVE-2020-15862
CVE-2020-15862 affects Net-SNMP with an improper privilege management flaw: SNMP WRITE access to the EXTEND MIB allows an authenticated local attacker to execute arbitrary commands as root. Practical impact is local privilege escalation; exploitation requires access to an authenticated SNMP sessi...
CVE-2020-1488
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
Windows AppX Deployment Extensions Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files. To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privilege...
The vulnerability of the Global Protect Agent for Linux’s endpoint protection software lies in its insecure handling of privileges. This allows attackers to elevate their privileges to the root level.
The vulnerability of the Global Protect Agent for Linux endpoint protection software lies in the insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...
CVE-2020-15862
Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...
Gantt-Chart For Jira 5.5.3 Missing Privilege Check Vulnerability
Gantt-Chart for Jira versions 5.5.3 and below misses a privilege check which allows an attacker to read and write the module configuration for other users. Product: Jira module "Gantt-Chart for Jira" Manufacturer: Frank Polscheit - Solutions & IT-Consulting Affected Versions: =5.5.3 Tested...
The vulnerability of the Google Chrome browser installer allows a hacker to gain access to confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of Google Chrome browser installers is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to access confidential data, compromise its integrity, and cause service failures...
Gantt-Chart For Jira 5.5.3 Missing Privilege Check
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advisory ID: SYSS-2020-029 Product: Jira module "Gantt-Chart for Jira" Manufacturer: Frank Polscheit - Solutions & IT-Consulting Affected Versions: =5.5.3 Tested Versions: 5.5.3 Vulnerability Type: Improper Privilege Management CWE-269 Risk Level:...
The vulnerability of the MpSigStub.exe executable of Microsoft Windows Defender allows a hacker to delete files in certain parts of the file system.
The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to delete files in certain parts of the file system remotely...
The vulnerability of the Microsoft Windows USO Core Worker component of the Windows operating system, which allows a hacker to escalate their privileges
The vulnerability of the Microsoft Windows USO Core Worker component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
The vulnerability of the Palo Alto Networks Traps software lies in the insecure management of privileges, allowing an attacker to elevate privileges or re-write system files.
The vulnerability of the Palo Alto Networks Traps software lies in the insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate privileges or overwrite system files...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate...