CWE:

	Tytuł	Data	Autor
Med.	Razer Synapse Race Condition / DLL Hijacking	18.09.2023	Dr. Oliver Schwarz
Low	Gantt-Chart For Jira 5.5.3 Missing Privilege Check	04.08.2020	Sebastian Auwaerter
Med.	Cellebrite UFED 7.5.0.845 Desktop Escape / Privilege Escalation	17.05.2020	Matthew Bergin
Med.	Ultimate Member 2.39 Unauthorized profile modification	18.06.2019	Clément Cruchet
Med.	WordPress Plugin WooCommerce GloBee (cryptocurrency) Payment Gateway 1.1.1 Payment Bypass / Unauthorized Order Status Spoofing	27.02.2019	GeekHack
Med.	Goozmo™ Systems v.1.0 Improper Privilege Management	29.01.2019	KingSkrupellos
Med.	TP-Link EAP Controller CSRF / Hard-Coded Key / XSS	04.05.2018	Core
Med.	SpiderControl SCADA Web Server 2.02.0007 Improper Privilege Management	01.11.2017	Karn Ganeshen
Med.	Solarwinds LEM 6.3.1 Sudo Script Abuse Privilege Escalation	25.04.2017	Hank Leininger and Mat...
Med.	Trendmicro InterScan 6.5-SP2_Build_Linux_1548 Privilege Escalation	18.02.2017	Matt Bergin
Med.	phpMyAdmin 3.5.x/4.0.x privilege escalation	30.07.2013	SecuriTeam Secure Disc...
High	Smartfren Connex EC 1261-2 UI OUC Local Privilege Escalation Vulnerability	27.09.2012	X-Cisadane

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-10-16

	CVE-2024-45461	Updating...	The CloudStack Quota feature allows cloud administrators to implement a quota or usage limit system for cloud resources, and is disabled by default. In environments where the feature is enabled, due to missing access check enforcements, non-administrative CloudStack user accounts are able to access and modify quota-related configurations and data. This issue affects Apache CloudStack from 4.7.0 through 4.18.2.3; and from 4.19.0.0 through 4.19.1.1, where the Quota feature is enabled. Users are recommended to upgrade to Apache CloudStack 4.18.2.4 or 4.19.1.2, or later, which addresses this issue. Alternatively, users that do not use the Quota feature are advised to disabled the plugin by setting the global setting "quota.enable.service" to "false".
	CVE-2023-32196	Updating...	A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific scenarios can lead to privilege escalation.
	CVE-2023-32194	Updating...	A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will receive * permissions for core namespaces. This can lead to someone being capable of accessing, creating, updating, or deleting a namespace in the project.

2024-10-11

CVE-2024-9002

Updating...

CWE-269: Improper Privilege Management vulnerability exists that could cause unauthorized access, loss of confidentiality, integrity, and availability of the workstation when non-admin authenticated user tries to perform privilege escalation by tampering with the binaries

2024-10-10

	CVE-2024-9518	Updating...	The UserPlus plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 2.0 due to insufficient restriction on the 'form_actions' and 'userplus_update_user_profile' functions. This makes it possible for unauthenticated attackers to specify their user role by supplying the 'role' parameter during a registration.
	CVE-2024-7048	Updating...	In version v0.3.8 of open-webui, an improper privilege management vulnerability exists in the API endpoints GET /api/v1/documents/ and POST /rag/api/v1/doc. This vulnerability allows a lower-privileged user to access and overwrite files managed by a higher-privileged admin. By exploiting this vulnerability, an attacker can view metadata of files uploaded by an admin and overwrite these files, compromising the integrity and availability of the RAG models.

2024-10-07

CVE-2024-45297

Updating...

Discourse is an open source platform for community discussion. Users can see topics with a hidden tag if they know the label/name of that tag. This issue has been patched in the latest stable, beta and tests-passed version of Discourse. All users area are advised to upgrade. There are no known workarounds for this vulnerability.

2024-10-01

CVE-2024-9265

Updating...

The Echo RSS Feed Post Generator plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 5.4.6. This is due to the plugin not properly restricting the roles that can set during registration through the echo_check_post_header_sent() function. This makes it possible for unauthenticated attackers to register as an administrator.

2024-09-25

	CVE-2024-45373	Updating...	Once logged in to ProGauge MAGLINK LX4 CONSOLE, a valid user can change their privileges to administrator.
	CVE-2024-23454	Updating...	Apache Hadoop�??s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all local users. As such, files written in this directory, without setting the correct posix permissions explicitly, may be viewable by all other local users.

 

---

Copyright 2024, cxsecurity.com