Privilege escalation.

SourceCodester Pharmacy Sales and Inventory System ShowForm.php sell_statement access control

• SourceCodester Pharmacy Sales and Inventory System
• Privilege escalation
• Broken access control

SourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorization

• SourceCodester Water Billing Management System
• Privilege escalation
• Broken access control

Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.

• Fsas Technologies Inc. ServerView Agents for Windows
• Privilege escalation

Dolibarr ERP CRM is vulnerable to Improper Authorization through its Leave Request REST API

• Privilege escalation
• Broken access control

<=15.0.3 · no fixed version yet

nextlevelbuilder GoClaw evolution_handlers.go auth improper authorization

• nextlevelbuilder GoClaw
• Privilege escalation
• Broken access control

nextlevelbuilder GoClaw RoleAdmin Gateway tts_config.go handleSave privileges management

• nextlevelbuilder GoClaw
• Privilege escalation

Possible information disclosure via External Interface

• OTRS
• Information disclosure
• Privilege escalation

TaleLin lin-cms-spring-boot book Endpoint BookController.java access control

• TaleLin lin-cms-spring-boot
• Privilege escalation
• Broken access control

Spectra Gutenberg Blocks <= 2.19.25 - Authenticated (Contributor+) Remote Code Execution via Arbitrary PHP Function Call via Block Attributes

• brainstormforce Spectra Gutenberg Blocks – Website Builder for the Block Editor
• Privilege escalation

praisonai-platform: Missing authorization on member removal enables full workspace takeover by any user regardless of role

• Privilege escalation
• Broken access control

<0.1.4 · fixed in 0.1.4

IPAM controller service account granted unnecessary full access to Secrets

• Privilege escalation

<1.11.7 || >=1.12.0, <1.12.4 · fixed in 1.11.7, 1.12.4

macrozheng mall Super Admin Password update improper authorization

• macrozheng mall
• Privilege escalation
• Broken access control

Dokploy: Schedule Authorization Bypass Enables Host/Server Command Execution

• dokploy
• Command injection
• Privilege escalation

RustFS: ImportIam Allows Creation of Backdoor Service Accounts Under Any Parent Including Root

• rustfs
• Privilege escalation
• Broken access control

TFA Basic Plugins - Access Bypass

• Drupal TFA Basic Plugins
• Privilege escalation

Advanced Custom Fields: Extended <= 0.9.2.5 - Unauthenticated Privilege Escalation via Validation Bypass to '_acf_post_id' Parameter

• hwk-fr Advanced Custom Fields: Extended
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

OpenStack Keystone has an Incorrect Authorization issue

• Privilege escalation
• Broken access control

>=14.0.0, <27.0.2 || >=28.0.0, <28.0.2 || >=29.0.0, <29.0.2 · fixed in 27.0.2, 28.0.2, 29.0.2

Improper privilege management in Oracle Corporation Oracle Flow Manufacturing

• Oracle Corporation Oracle Flow Manufacturing
• Privilege escalation

Improper access control in Oracle Corporation Oracle Payroll

• Oracle Corporation Oracle Payroll
• Privilege escalation
• Broken access control

Improper access control in Oracle Corporation Oracle Universal Work Queue

• Oracle Corporation Oracle Universal Work Queue
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle Payments

• Oracle Corporation Oracle Payments
• Privilege escalation
• Authentication bypass

Casdoor: GetTokenExchangeToken bypass through lack of cross-organization JWT signature check

• Privilege escalation
• Broken access control

<2.387.0 · fixed in 2.387.0

Privilege Escalation

• Mennekes Amtron
• Privilege escalation

Frontend Admin by DynamiApps <= 3.29.2 - Unauthenticated Privilege Escalation via Form Configuration Injection

• shabti Frontend Admin by DynamiApps
• Privilege escalation

Duplicate Advisory: Keycloak has privilege escalation via improper scope mapping enforcement

• Privilege escalation

<26.6.4 · fixed in 26.6.4

NitroSense V3: Security Vulnerability Information

• Acer NitrorSense V3
• Path traversal
• Privilege escalation

Jenkins Job Import Plugin does not perform a permission check in an HTTP endpoint

• Privilege escalation

<143.145.v48f9a · fixed in 143.145.v48f9a

Jenkins AppSpider Plugin does not perform a permission check in a method implementing form validation

• Privilege escalation

<1.0.18 · fixed in 1.0.18

Vulnerabilities exists in IBM Netezza Performance Server Replication Services

• IBM Netezza Performance Server Replication Services
• Privilege escalation

WordPress WebinarIgnition plugin < 4.08.253 - Privilege Escalation vulnerability

• Saleswonder Team: Tobias WebinarIgnition
• Privilege escalation

WordPress miniorange otp verification plugin <= 5.4.9 - Privilege Escalation vulnerability

• miniorange otp verification
• Privilege escalation

Firebase Support & Chat Management <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

• devsabbirahmed Firebase Support & Chat Management
• Privilege escalation

Northern.tech Mender Enterprise Server before 4.1.1 has Incorrect Access Control.

• Privilege escalation

JeecgBoot AiragModelController access control

• JeecgBoot
• Privilege escalation
• Broken access control

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

JeecgBoot add access control

• JeecgBoot
• Privilege escalation
• Broken access control

JeecgBoot selectDepart LoginController.selectDepart access control

• JeecgBoot
• Privilege escalation
• Broken access control

JeecgBoot SysUser userEdit user.getUsername access control

• JeecgBoot
• Privilege escalation
• Broken access control

OS command injection in OpenVPN Inc OpenVPN Connect

• OpenVPN Inc OpenVPN Connect
• Command injection
• Privilege escalation

sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard access control

• sambitraj STUDENT-MANAGEMENT-SYSTEM
• Privilege escalation
• Broken access control

hermes-agent has a sandbox issue

• Privilege escalation
• CWE-264

<0.11.0 · fixed in 0.11.0

hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control

• hemant6488 CodeIgniter-StudentManagementSystem
• Privilege escalation
• Broken access control

WordPress Smart Manager plugin <= 8.85.0 - Privilege Escalation vulnerability

• StoreApps Smart Manager
• Privilege escalation

SourceCodester Student Grades Management System classroom.php removeStudentFromClassroom improper authorization

• SourceCodester Student Grades Management System
• Privilege escalation
• Broken access control

SourceCodester Student Grades Management System grades.php improper authorization

• SourceCodester Student Grades Management System
• Privilege escalation
• Broken access control

Acer Care Center creates a Named Pipe with a weak Security Descriptor

• Acer Care Center
• Privilege escalation

NitroSense V3: Local Privilege Escalation (LPE) vulnerability

• Acer NitrorSense V3
• Path traversal
• Privilege escalation

SourceCodester Indian Invoicing System Backend Endpoint access control

• SourceCodester Indian Invoicing System
• Privilege escalation
• Broken access control

Sushmi-pal Invoice-System Profile Workflow profile improper authorization

• Sushmi-pal Invoice-System
• Privilege escalation
• Broken access control

Sushmi-pal Invoice-System User Management user improper authorization

• Sushmi-pal Invoice-System
• Privilege escalation
• Broken access control

Besen BS20 EV Charging Station OTA Update Installation improper authorization

• Besen BS20 EV Charging Station
• Privilege escalation
• Broken access control

JPress UCenter Article Submission Endpoint doWriteSave improper authorization

• JPress
• Privilege escalation
• Broken access control

Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_get_screen' AJAX action

• Wishlist Member
• Privilege escalation

Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Options Update via 'wishlistmember_team_accounts_save_settings' AJAX action

• Wishlist Member
• Privilege escalation

Wishlist Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) API Secret Key Disclosure and Privilege Escalation via 'wlm3_export_settings' AJAX Action

• Wishlist Member
• Privilege escalation

WishList Member <= 3.30.1 - Missing Authorization to Authenticated (Subscriber+) Generate API Secret Key via 'wlm3_generate_api_key' AJAX action

• Wishlist Member
• Privilege escalation

Nezha Monitoring: RoleMember can run shell on every server (cross-tenant RCE) via POST /api/v1/cron

• Command injection
• Privilege escalation

>=1.4.0, <1.14.15-0.20260517022419-d7526351cf97 · fixed in 1.14.15-0.20260517022419-d7526351cf97