Exploit for Improper Privilege Management in Supermicro X11Ssm-F_Firmware

CVE-2023-40289 ============== This is an exploit for CVE-2023-...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-5494

ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup. This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13...

CVE-2025-9966

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9966

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9966 Execution with Unnecessary Privileges

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

CVE-2025-9966

CVE-2025-9966 refers to an improper privilege management vulnerability in the Novakon P series (affected version V2001.A.C518o2). The connected records describe that an attacker could gain root privileges if a single service is compromised, indicating a local privilege escalation that affects the...

CVE-2025-9966 Execution with Unnecessary Privileges

Improper privilege management vulnerability in Novakon P series allows attackers to gain root privileges if one service is compromized.This issue affects P series: P – V2001.A.C518o2 until P-2.0.05 Build 2026.02.06 commit d0f97fd9...

PT-2025-39167

Name of the Vulnerable Software and Affected Versions Novakon P series versions prior to V2001.A.C518o2 Description A flaw in privilege management within Novakon P series devices allows attackers to obtain root privileges if a single service is compromised. This impacts industrial environments an...

Novakon P series 安全漏洞

Novakon P series is a series of industrial panel PC operation pages from Taiwan, China-based Speedcom Novakon. A security vulnerability exists in the Novakon P series version V2001.A.C518o2, which stems from improper privilege management and could allow an attacker to gain root privileges...

CVE-2025-9038

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version...

CVE-2025-9038 S1 Agile Privilege Escalation

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version...

CVE-2025-9038

CVE-2025-9038 affects GE Vernova S1 Agile Configuration Software on Windows (version 3.1 and earlier). The issue is described as improper privilege management that enables privilege escalation. The vulnerability targets the configuration software’s handling of privileges, with a local attack vect...

CVE-2025-9038 S1 Agile Privilege Escalation

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version...

PT-2025-38727

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version...

NetApp StorageGRID 安全漏洞

NetApp StorageGRID is a suite of object storage solutions from Network Appliance NetApp. A security vulnerability exists in NetApp StorageGRID versions prior to 11.8.0.15 and prior to 11.9.0.8, which stems from improper privilege management and could result in elevated privileges...

ROS-20250912-11

Jupyter Core vulnerability in Jupyter Notebook interactive development and code execution environment is related to privilege management errors. Exploitation of the vulnerability could allow an attacker acting remotely to disclose protected information, download and execute code. remotely, disclo...

CVE-2025-40594

A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...

ROS-20250911-12

Vulnerabilities in GLPI's asset management and data center management software are related to improper privilege management. Exploitation of the vulnerability could allow an attacker acting remotely to escalate privileges...