CWE:

	Topic	Date	Author
Med.	Razer Synapse Race Condition / DLL Hijacking	18.09.2023	Dr. Oliver Schwarz
Low	Gantt-Chart For Jira 5.5.3 Missing Privilege Check	04.08.2020	Sebastian Auwaerter
Med.	Cellebrite UFED 7.5.0.845 Desktop Escape / Privilege Escalation	17.05.2020	Matthew Bergin
Med.	Ultimate Member 2.39 Unauthorized profile modification	18.06.2019	Clément Cruchet
Med.	WordPress Plugin WooCommerce GloBee (cryptocurrency) Payment Gateway 1.1.1 Payment Bypass / Unauthorized Order Status Spoofing	27.02.2019	GeekHack
Med.	Goozmo™ Systems v.1.0 Improper Privilege Management	29.01.2019	KingSkrupellos
Med.	TP-Link EAP Controller CSRF / Hard-Coded Key / XSS	04.05.2018	Core
Med.	SpiderControl SCADA Web Server 2.02.0007 Improper Privilege Management	01.11.2017	Karn Ganeshen
Med.	Solarwinds LEM 6.3.1 Sudo Script Abuse Privilege Escalation	25.04.2017	Hank Leininger and Mat...
Med.	Trendmicro InterScan 6.5-SP2_Build_Linux_1548 Privilege Escalation	18.02.2017	Matt Bergin
Med.	phpMyAdmin 3.5.x/4.0.x privilege escalation	30.07.2013	SecuriTeam Secure Disc...
High	Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability	27.09.2012	X-Cisadane

---

CVEMAP Search Results

CVE

Details

Description

2024-04-24

CVE-2023-51425

Updating...

Improper Privilege Management vulnerability in Jacques Malgrange Rencontre �?? Dating Site allows Privilege Escalation.This issue affects Rencontre �?? Dating Site: from n/a through 3.10.1.

2024-04-05

CVE-2023-6522

Updating...

Improper Privilege Management vulnerability in ExtremePacs Extreme XDS allows Collect Data as Provided by Users.This issue affects Extreme XDS: before 3914.

2024-04-03

CVE-2024-0172

Updating...

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation.

2024-04-02

CVE-2024-3137

Updating...

Improper Privilege Management in uvdesk/community-skeleton

2024-03-29

CVE-2024-23537

Updating...

Improper Privilege Management vulnerability in Apache Fineract.This issue affects Apache Fineract: <1.8.5. Users are recommended to upgrade to version 1.9.0, which fixes the issue.

2024-03-18

CVE-2024-1753

Updating...

A flaw was found in Podman Build and Buildah which allows containers to mount arbitrary locations on the host filesystem into build containers. A malicious Containerfile can use a dummy image with a symbolic link to the root filesystem as a mount source and cause the mount operation to mount the host root filesystem inside the RUN step. The commands inside the RUN step will then have read-write access to the host filesystem, allowing for full container escape at build time.

2024-02-26

CVE-2024-0439

Updating...

As a manager, you should not be able to modify a series of settings. In the UI this is indeed hidden as a convenience for the role since most managers would not be savvy enough to modify these settings. They can use their token to still modify those settings though through a standard HTTP request While this is not a critical vulnerability, it does indeed need to be patched to enforce the expected permission level.

2024-02-15

	CVE-2023-45581	Updating...	An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator with Super Admin privileges to perform global administrative operations affecting other sites via crafted HTTP or HTTPS requests.
	CVE-2023-4993	Updating...	Improper Privilege Management vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users.This issue affects SoliPay Mobile App: before 5.0.8.

2024-02-14

CVE-2023-25535

Updating...

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 2023

 

---

Copyright 2024, cxsecurity.com