Privilege escalation.

Missing authentication in Oracle Corporation Oracle Process Manufacturing Product Development

• Oracle Corporation Oracle Process Manufacturing Product Development
• Privilege escalation
• Broken access control

Improper privilege management in Oracle Corporation Oracle Solaris

• Oracle Corporation Oracle Solaris
• Privilege escalation
• Denial of service

Missing authentication in Oracle Corporation JD Edwards EnterpriseOne Tools

• Oracle Corporation JD Edwards EnterpriseOne Tools
• Privilege escalation
• Authentication bypass

Improper access control in Oracle Corporation Oracle Enterprise Command Center Framework

• Oracle Corporation Oracle Enterprise Command Center Framework
• Privilege escalation
• Broken access control

Improper access control in Oracle Corporation Oracle Enterprise Command Center Framework

• Oracle Corporation Oracle Enterprise Command Center Framework
• Privilege escalation
• Broken access control

Improper access control in Oracle Corporation Oracle Enterprise Command Center Framework

• Oracle Corporation Oracle Enterprise Command Center Framework
• Privilege escalation
• Broken access control

Improper access control in Oracle Corporation Oracle Enterprise Command Center Framework

• Oracle Corporation Oracle Enterprise Command Center Framework
• Privilege escalation
• Broken access control

Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne General Ledger

• Oracle Corporation JD Edwards EnterpriseOne General Ledger
• Privilege escalation

Improper privilege management in Oracle Corporation Siebel CRM Integration

• Oracle Corporation Siebel CRM Integration
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Enterprise Manager Base Platform

• Oracle Corporation Oracle Enterprise Manager Base Platform
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Enterprise Manager Base Platform

• Oracle Corporation Oracle Enterprise Manager Base Platform
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle WebCenter Content

• Oracle Corporation Oracle WebCenter Content
• Privilege escalation

Improper privilege management in Oracle Corporation Identity Manager Connector

• Oracle Corporation Identity Manager Connector
• Privilege escalation

Improper privilege management in Oracle Corporation WebLogic Server

• Oracle Corporation WebLogic Server
• Privilege escalation

Improper privilege management in Oracle Corporation PeopleSoft Enterprise PT PeopleTools

• Oracle Corporation PeopleSoft Enterprise PT PeopleTools
• Privilege escalation

Improper privilege management in Oracle Corporation PeopleSoft Enterprise PT PeopleTools

• Oracle Corporation PeopleSoft Enterprise PT PeopleTools
• Privilege escalation

Improper privilege management in Dell EMC VxRail Appliance

• Dell EMC VxRail Appliance
• Privilege escalation

Information disclosure, sandbox escape in the Security: Process Sandboxing component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Sandbox escape in the DOM: Workers component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation
• CWE-693

Privilege escalation in the Graphics: WebRender component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

LatePoint <= 5.5.1 - Authenticated (Agent+) Privilege Escalation to Administrator via IDOR in OsOrdersController::create_or_update + Unauthenticated Customer-Cabinet Password Reset

• LatePoint – Calendar Booking Plugin for Appointments and Events
• Privilege escalation

A local privilege escalation vulnerability in Nokia SR Linux

• Nokia SR Linux
• Privilege escalation

WordPress Dokan plugin <= 5.0.2 - Privilege Escalation vulnerability

• Dokan
• Privilege escalation

WordPress LatePoint plugin <= 5.5.1 - Privilege Escalation vulnerability

• LatePoint
• Privilege escalation

WordPress Listdom plugin <= 5.5.0 - Privilege Escalation vulnerability

• Webilia Inc. Listdom
• Privilege escalation

WordPress Amelia plugin <= 2.3 - Privilege Escalation vulnerability

• TMS Amelia
• Privilege escalation

WordPress WP BASE Booking plugin <= 5.9.0 - Privilege Escalation vulnerability

• Hakan Ozevin WP BASE Booking
• Privilege escalation

WordPress Datalogics Ecommerce Delivery plugin <= 2.6.62 - Privilege Escalation vulnerability

• Datalogics Ecommerce Delivery
• Privilege escalation

WordPress B Blocks plugin <= 2.0.31 - Privilege Escalation vulnerability

• bPlugins B Blocks
• Privilege escalation

WordPress WooCommerce Cart Abandonment Recovery plugin < 2.1.0 - Privilege Escalation vulnerability

• Brainstorm Force WooCommerce Cart Abandonment Recovery
• Privilege escalation

WordPress iControlWP plugin <= 5.5.3 - Privilege Escalation vulnerability

• Paul iControlWP
• Privilege escalation

WordPress AI Engine plugin <= 3.4.9 - Privilege Escalation vulnerability

• Meow Apps AI Engine
• Privilege escalation

WordPress Masteriyo - LMS plugin <= 2.2.0 - Privilege Escalation vulnerability

• ThemeGrill Masteriyo - LMS
• Privilege escalation

DVDFab Virtual Drive Signed Kernel Driver dvdfabio.sys privileges management

• DVDFab Virtual Drive
• Privilege escalation

hcengineering Huly Platform User Information operations.ts getAccountInfo improper authorization

• hcengineering Huly Platform
• Privilege escalation
• Broken access control

hcengineering Huly Platform RPC operations.ts getMailboxSecret access control

• hcengineering Huly Platform
• Privilege escalation
• Broken access control

IObit Malware Fighter DLL permission

• IObit Malware Fighter
• Privilege escalation
• CWE-275

An issue in Iru, Inc Kandji Agent before v.4.7.5(5374) allows a local attacker to escalate privileges via a client validation gap to invoke restricted agent functionality.

• Privilege escalation

An issue in Microvirt MEmu Android Emulator 9.2.7.0 allows a local attacker to escalate privileges via the MemuService.exe component.

• Privilege escalation

ChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collection

• Privilege escalation
• Broken access control

>=0.4.17, <=1.5.9 · no fixed version yet

MariaDB: FILE privilege was not checked for subqueries in the FROM clause

• MariaDB server
• Privilege escalation
• Broken access control

WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability

• Hippoo Mobile App for WooCommerce
• Privilege escalation

Protection mechanism failure in Google Chrome

• Google Chrome
• Privilege escalation
• CWE-693

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Internal Communication or File Operation Manipulation

• CyberArk Software, a Palo Alto Networks Company Idira Endpoint Privilege Manager
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

Quest Bot: Manage Server users can configure AutoRole to grant Administrator to controlled joining accounts

• duck-organization quest-bot
• Privilege escalation

Local Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool

• Broadcom Symantec Endpoint Protection CleanWipe Removal Tool
• Privilege escalation

Doctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation

• AmentoTech Doctreat Core
• Privilege escalation

.NET SDK Elevation of Privilege Vulnerability

• Microsoft .NET 10.0 runtime
• Microsoft .NET 8.0 runtime
• Privilege escalation
• Broken access control

Race condition in Arm C1-Ultra and others

• Arm C1-Ultra
• Arm C1-Premium
• Privilege escalation
• Race condition

Execution with unnecessary privileges in Siemens SINEC INS

• Siemens SINEC INS
• Privilege escalation

Events Calendar for GeoDirectory <= 2.3.28 - Authenticated (Subscriber+) Privilege Escalation

• stiofansisland Events Calendar for GeoDirectory
• Privilege escalation

TOTOLINK EX200 vsftpd vsftpd.conf least privilege violation

• TOTOLINK EX200
• Privilege escalation
• CWE-272

Dolibarr ERP CRM Legacy Filemanager config.inc.php improper authorization

• Dolibarr ERP CRM
• Privilege escalation
• Broken access control

nebula-mesh's web UI lacks CSRF tokens on /ui/* mutating endpoints

• Privilege escalation
• Cross-site request forgery (CSRF)

<0.3.3 · fixed in 0.3.3

actual Allows Electron to Run As Node

• Code injection
• Privilege escalation

<26.5.0 · fixed in 26.5.0

D-Link DGS-1100-08PD Web boa.conf least privilege violation

• D-Link DGS-1100-08PD
• Privilege escalation
• CWE-272