Privilege escalation.

TOTOLINK CP450 vsftpd vsftpd.conf least privilege violation

• TOTOLINK CP450
• Privilege escalation
• CWE-272

imvks786 student_management_system Student Deletion Endpoint see.php improper authorization

• imvks786 student_management_system
• Privilege escalation
• Broken access control

imvks786 student_management_system Student Record add.php access control

• imvks786 student_management_system
• Privilege escalation
• Broken access control

Apache HTTP Server: escalation of privilege through expressions in .htaccess in multiple modules

• Apache Software Foundation Apache HTTP Server
• Privilege escalation

Mohammed-eid35 bank-management-system-springboot Transaction Endpoint TransactionController.java improper authorization

• Mohammed-eid35 bank-management-system-springboot
• Privilege escalation
• Broken access control

SourceCodester Inventory System Account Creation users_handler.php improper authorization

• SourceCodester Inventory System
• Privilege escalation
• Broken access control

D-Link DCS-5615 Boa Webserver boa.conf least privilege violation

• D-Link DCS-5615
• Privilege escalation
• CWE-272

TOTOLINK AC1200 T8 vsftpd vsftpd.conf least privilege violation

• TOTOLINK AC1200 T8
• Privilege escalation
• CWE-272

D-Link DIR-823G vsftpd vsftpd.conf least privilege violation

• D-Link DIR-823G
• Privilege escalation
• CWE-272

Kushan2k student-management-system Profile Update Endpoint AdminController.php edit-admin improper authorization

• Kushan2k student-management-system
• Privilege escalation
• Broken access control

zilliztech deep-searcher has an Incorrect Privilege Assignment issue

• Privilege escalation
• Broken access control

<=0.0.2 · no fixed version yet

Chengdu Everbrite Network Technology BeikeShop Stripe Plugin StripeController.php callback improper authorization

• Chengdu Everbrite Network Technology BeikeShop
• Privilege escalation
• Broken access control

theonedev Pull Request issues canAccessIssue improper authorization

• onedev
• Privilege escalation
• Broken access control

theonedev REST API default-branch improper authorization

• onedev
• Privilege escalation
• Broken access control

theonedev Parent Project projects improper authorization

• onedev
• Privilege escalation
• Broken access control

theonedev projects improper authorization

• onedev
• Privilege escalation
• Broken access control

Shopper: Authorization bypass and RBAC privilege escalation in team settings

• Privilege escalation
• Broken access control

<2.8.0 · fixed in 2.8.0

Path Traversal in Altium Enterprise Server Collaboration Service Allows Privilege Escalation

• Altium Enterprise Server
• Path traversal
• Privilege escalation

Arista CloudVision Exchange (CVX) Cluster Privilege Escalation via MCS Redis Session

• Arista Networks EOS / CloudVision eXchange (CVX)
• Privilege escalation

tittuvarghese CollegeManagementSystem Admin admin_page.php improper authorization

• tittuvarghese CollegeManagementSystem
• Privilege escalation
• Broken access control

SourceCodester Ship Ferry Ticket Reservation System admin improper authorization

• SourceCodester Ship Ferry Ticket Reservation System
• Privilege escalation
• Broken access control

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Execution with unnecessary privileges in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Shopware: Privilege escalation: non-admin user with user:create ACL can create admin accounts

• Privilege escalation

<6.6.10.18 || >=6.7.0.0, <6.7.10.1 · fixed in 6.6.10.18, 6.7.10.1

MISP user edit endpoint mass assignment vulnerability allows unauthorized user account modification

• misp
• Privilege escalation

Cloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws

• Red Hat OpenShift Container Platform 4
• Red Hat OpenShift Container Platform 5
• Privilege escalation

Local Privilege Escalation in VPN Client

• Forcepoint VPN Client
• Privilege escalation

Broadcast Receiver Privilege Escalation

• Acer Connect M6E 5G Portable WiFi Router
• Privilege escalation

Execution with unnecessary privileges in Acronis DeviceLock DLP

• Acronis DeviceLock DLP
• Privilege escalation

WordPress School Management plugin <= 93.2.0 - Privilege Escalation vulnerability

• Mojoomla School Management
• Privilege escalation

SourceCodester Online Boat Reservation System Administrative Endpoint improper authorization

• SourceCodester Online Boat Reservation System
• Privilege escalation
• Broken access control

WordPress Masteriyo LMS PRO plugin <= 2.20.0 - Privilege Escalation Vulnerability

• Themeisle Masteriyo LMS PRO
• Privilege escalation

Kirki 6.0.0 - 6.0.6 - Unauthenticated Privilege Escalation via 'handle_forgot_password'

• themeum Kirki – Freeform Page Builder, Website Builder & Customizer
• Privilege escalation

PackageKit API pk-transaction.c g_file_test improper authorization

• PackageKit
• Privilege escalation
• Broken access control

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Path traversal
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

DevaslanPHP project-management Ticket KanbanScrumHelper.php recordUpdated improper authorization

• DevaslanPHP project-management
• Privilege escalation
• Broken access control

DevaslanPHP project-management Livewire ViewTicket.php doDeleteComment improper authorization

• DevaslanPHP project-management
• Privilege escalation
• Broken access control

Bottelet DaybydayCRM DocumentsController.php view improper authorization

• Bottelet DaybydayCRM
• Privilege escalation
• Broken access control

j3k0 mcp-google-workspace MCP Gmail Tool gmail.ts saveToDisk access control

• j3k0 mcp-google-workspace
• Privilege escalation
• Broken access control

a4m4 Student-Management-System deleteform.php improper authorization

• a4m4 Student-Management-System
• Privilege escalation
• Broken access control

decolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorization

• decolua 9router
• Privilege escalation
• Broken access control

WordPress Contest Gallery Pro plugin <= 29.0.1 - Privilege Escalation vulnerability

• Wasiliy Strecker / ContestGallery developer Contest Gallery Pro
• Privilege escalation

WordPress AIWU plugin <= 1.4.17 - Privilege Escalation vulnerability

• Sergey AIWU
• Privilege escalation

praisonai-platform: Any workspace member can delete the entire workspace via DELETE /workspaces/{id}

• Privilege escalation
• Broken access control

<0.1.4 · fixed in 0.1.4

praisonai-platform: Any workspace member can rewrite workspace name, description, and settings via PATCH /workspaces/{id}

• Privilege escalation
• Broken access control

<0.1.4 · fixed in 0.1.4