Privilege escalation.

Improper privilege management in Oracle Corporation Oracle Identity Manager

• Oracle Corporation Oracle Identity Manager
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle WebCenter Portal

• Oracle Corporation Oracle WebCenter Portal
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle SOA Suite

• Oracle Corporation Oracle SOA Suite
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Identity Manager Connector

• Oracle Corporation Oracle Identity Manager Connector
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle HTTP Server

• Oracle Corporation Oracle HTTP Server
• Privilege escalation

Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne HCM Foundation

• Oracle Corporation JD Edwards EnterpriseOne HCM Foundation
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle HTTP Server

• Oracle Corporation Oracle HTTP Server
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Unified Directory

• Oracle Corporation Oracle Unified Directory
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Unified Directory

• Oracle Corporation Oracle Unified Directory
• Privilege escalation

Improper privilege management in Oracle Corporation TimesTen In-Memory Database

• Oracle Corporation TimesTen In-Memory Database
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Access Manager

• Oracle Corporation Oracle Access Manager
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Project Costing

• Oracle Corporation Oracle Project Costing
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Coherence

• Oracle Corporation Oracle Coherence
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Coherence

• Oracle Corporation Oracle Coherence
• Privilege escalation

Improper privilege management in Oracle Corporation MySQL Server and others

• Oracle Corporation MySQL Server
• Oracle Corporation MySQL Cluster
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Database Server

• Oracle Corporation Oracle Database Server
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Enterprise Manager Base Platform

• Oracle Corporation Oracle Enterprise Manager Base Platform
• Privilege escalation

Gitea LFS Deploy-Key Privilege Escalation

• Privilege escalation
• Broken access control

<1.27.0 · fixed in 1.27.0

Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing

• kubeflow community-distribution
• Privilege escalation

snap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup

• Canonical Ubuntu 26.04 LTS
• Canonical Ubuntu 24.04 LTS
• Privilege escalation

snapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates

• Canonical Ubuntu 26.04 LTS
• Canonical Ubuntu 24.04 LTS
• Privilege escalation

Privilege escalation in the Data Loss Prevention component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in WebExtensions

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Content Processes component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Content Processes component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Workers component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation
• Broken access control

Easy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint

• hassantafreshi Easy Form Builder by WhiteStudio – Drag & Drop Form Builder
• Privilege escalation

@better-auth/sso: SSO provider may allow registration for any org member without a checking their role

• Privilege escalation
• Broken access control

>=1.2.10, <1.6.11 · fixed in 1.6.11

NextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog

• pdovhomilja nextcrm-app
• Privilege escalation
• Broken access control

RT: Privilege escalation and information disclosure via REST 2.0 user collection endpoint

• bestpractical rt
• Information disclosure
• Privilege escalation

Improper privilege management in dotCMS

• dotCMS
• Privilege escalation

A privilege escalation vulnerability affects HCL Commerce

• HCLSoftware Commerce
• Privilege escalation

Apache Syncope: User self-service privilege escalation

• Apache Software Foundation Apache Syncope
• Privilege escalation

Passwordless Login by VentraConnect < 1.4.1 - Unauthenticated Account Takeover via Email OTP Brute Force

• Social Login, Passkeys, Magic Link & Email OTP
• Privilege escalation

net: skmsg: preserve sg.copy across SG transforms

• Linux kernel
• Privilege escalation

jxxghp MoviePilot Application API improper authorization

• jxxghp MoviePilot
• Privilege escalation
• Broken access control

nextlevelbuilder GoClaw credentialed_exec.go ExecTool.Execute improper authorization

• nextlevelbuilder GoClaw
• Privilege escalation
• Broken access control

nextlevelbuilder GoClaw exec_approval.go isSafeBin improper authorization

• nextlevelbuilder GoClaw
• Privilege escalation
• Broken access control

VMware Avi Load Balancer Privilege Escalation Vulnerability

• VMware Avi Load Balancer
• Privilege escalation

VMware Avi Load Balancer Local Privilege Escalation Vulnerability

• VMware Avi Load Balancer
• Privilege escalation

Local privilege escalation in Symantec ITMS

• Broadcom Symantec Management Suite
• Privilege escalation

Arbitrary File Read as SYSTEM in Symantec ITMS

• Broadcom Symantec IT Management Suite
• Privilege escalation

AI Chatbot & Workflow Automation by AIWU < 1.5.4 - Unauthenticated Privilege Escalation via MCP OAuth

• AI Copilot
• Privilege escalation

User Registration & Membership < 5.2.3 - Unauthenticated Privilege Escalation via Unbound members_data Membership ID

• User Registration & Membership
• Privilege escalation

Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit <= 2.8.4 - Unauthenticated Privilege Escalation via 'aiomatic_call_google_ai_function'

• CodeRevolution Aimogen Pro - All-in-One AI Content Writer, Editor, ChatBot & Automation Toolkit
• Privilege escalation

Bricksforge <= 3.1.8.6 - Unauthenticated Privilege Escalation via Pro Forms fieldIds Parameter

• Bricksforge
• Privilege escalation

ArcadeDB: Privilege escalation via reader role in /api/v1/command JS scripting language — arbitrary host file read

• Privilege escalation
• Broken access control

<26.7.1 · fixed in 26.7.1

Execution with unnecessary privileges in Lenovo App Store

• Lenovo App Store
• Privilege escalation

WPFunnels <= 3.12.8 - Authenticated (Funnel Manager+) Privilege Escalation via 'group_id' Path Parameter

• getwpfunnels WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
• Privilege escalation

Digits: WordPress Mobile Number Signup and Login <= 9.1.0.5 - Authenticated (Subscriber+) Privilege Escalation via 'digits_reg_userrole' Parameter

• UnitedOver Digits: WordPress Mobile Number Signup and Login
• Privilege escalation

Local privilege escalation via unauthenticated ALPC in ESET Inspect Connector

• ESET, spol. s.r.o. ESET Inspect Connector
• Privilege escalation

Redux Framework < 4.5.13 - Subscriber+ Privilege Escalation to Administrator

• Redux Framework
• Privilege escalation

An issue in OPSWAT AppRemover Driver (ardrv.sys) v2017.10.02.1551 and earlier in IOCTL handler 0x2420031.

• Privilege escalation

Wekan: Missing authorization on OIDC Meteor methods allows privilege escalation to admin

• wekan
• Privilege escalation
• Broken access control