Privilege escalation.

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

WordPress Abandoned Cart Pro for WooCommerce plugin <= 10.4.0 - Privilege Escalation vulnerability

• Tyche Softwares. Abandoned Cart Pro for WooCommerce
• Privilege escalation

WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability

• ThemeGoods Capella
• Privilege escalation

Freeipa: idm: ipa: freeipa: obtaining tgs with impersonating cname through trust relationships

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Privilege escalation

JSON Options <= 0.0.4 - Unauthenticated Arbitrary Options Update

• JSON Options
• Privilege escalation

Improper Access Control through Scheduled Searches in Splunk AI Toolkit

• Splunk AI Toolkit
• Privilege escalation

Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise

• Splunk Enterprise
• Privilege escalation

Improper Privilege Management on the Management Port in Splunk Enterprise for Windows

• Splunk Enterprise
• Privilege escalation

Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise

• Splunk Enterprise
• Privilege escalation

DS8900F and DS8A00 Privilege Escalation

• IBM DS8A00( R10.0 - R10.1 )
• IBM DS8900F ( R9.4)
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Wekan: a low-privilege board member escalates to board admin and takes over a private board via the `sort` collection-allow rule

• wekan
• Privilege escalation
• Broken access control

Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork

• Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Advanced Cluster Management for Kubernetes 2.13
• Privilege escalation

Vulnerabilities in IBM AIX and PowerVM VIOS

• IBM AIX
• IBM PowerVM VIOS
• Privilege escalation

Improper privilege management in Dell PowerPath

• Dell PowerPath
• Privilege escalation

Improper privilege management in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Privilege escalation

WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability

• KlbTheme Total Donations
• Privilege escalation

WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability

• ThemetechMount TrueBooker
• Privilege escalation

xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission

• xianrendzw EasyReport
• Privilege escalation
• CWE-275

linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE)

• Path traversal
• Privilege escalation

<6.1.0 · fixed in 6.1.0

Linuxfabrik Monitoring Plugins: Arbitrary root file disclosure via unconfined --filename in logfile plugin (sudoers LPE)

• Linuxfabrik monitoring-plugins
• Path traversal
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management

• Oracle Corporation Oracle Hyperion Financial Management
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Virtual Directory

• Oracle Corporation Oracle Virtual Directory
• Privilege escalation

Execution with unnecessary privileges in NVIDIA Cumulus Linux GA

• NVIDIA Cumulus Linux GA
• Privilege escalation

Submariner-operator: operator clusterrole grants cluster-wide create/update on all configmaps

• Red Hat Advanced Cluster Management for Kubernetes 2.16
• Red Hat Advanced Cluster Management for Kubernetes 2.17
• Privilege escalation

Managed-serviceaccount: managed-serviceaccount: hub addon-manager clusterrole grants cluster-wide secret read/write and csr approval

• Red Hat Multicluster Engine for Kubernetes
• Red Hat Advanced Cluster Management for Kubernetes 2
• Privilege escalation

WordPress SupportCandy plugin <= 3.5.1 - Broken Authentication vulnerability

• PSM Plugins SupportCandy
• Privilege escalation

WordPress MasterStudy LMS plugin <= 3.7.41 - Privilege Escalation vulnerability

• Stylemix MasterStudy LMS
• Privilege escalation

WordPress The Grid plugin <= 2.8.0 - Privilege Escalation vulnerability

• ThemeOne The Grid
• Privilege escalation

Duplicate Advisory: Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

• Privilege escalation

* · no fixed version yet

Privilege escalation in the Enterprise Policies component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Request Handling component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Application Update component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Downloads API component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Shell Integration component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Networking: Cookies component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Remote Settings Client component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Graphics: CanvasWebGL component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Navigation component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DOM: Networking component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

ArcadeDB before 26.8.1 Authentication Bypass via Async Command

• ArcadeData arcadedb
• Privilege escalation

ArcadeDB 26.4.2 before 26.8.1 Authorization Bypass via set_server_setting

• ArcadeData arcadedb
• Privilege escalation

ArcadeDB before 26.8.1 Privilege Escalation via gRPC Transaction

• ArcadeData arcadedb
• Privilege escalation

OpenBoxes Product Supplier Edit Controller RoleInterceptor.groovy improper authorization

• OpenBoxes
• Privilege escalation
• Broken access control

Berkeley Out-of-Order Machine (BOOM) commit 5223e44cfeb26f41380057a2eb4d651197475f69 contains a potential incorrect privilege assignment issue in the v3 and v4 NBDTLB implementations.

• Privilege escalation

Dokploy: Invitation Role Escalation Allows Organization Takeover

• dokploy
• Privilege escalation

SkyPilot Authentication Bypass via Service Account Role Escalation

• skypilot
• Privilege escalation

Search-v2-operator: search-v2-operator: cluster-wide impersonate on users/groups shared across 4 pods grants hub system:masters

• Red Hat Advanced Cluster Management for Kubernetes 2.11
• Red Hat Advanced Cluster Management for Kubernetes 2.13
• Privilege escalation

Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

• Red Hat OpenShift AI 3.4
• Privilege escalation

Webkul Bagisto Backend Customer Behavior Data Endpoint customers privileges management

• Webkul Bagisto
• Privilege escalation

Adblock for Youtube Extension Event Listener contentscript.js updateDynamicRules improper authorization

• Adblock for Youtube Extension
• Privilege escalation
• Broken access control

An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.

• Privilege escalation

An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.

• Privilege escalation

All-in-One WP Migration and Backup < 7.108 - Multisite Subsite Admin+ Network-Wide PHP Code Execution via REST Import

• All-in-One WP Migration and Backup
• Privilege escalation

Frontend Admin by DynamiApps <= 3.29.9 - Unauthenticated Privilege Escalation via 'item_id' Parameter

• shabti Frontend Admin by DynamiApps
• Privilege escalation

OpenBoxes Role Interceptor RoleInterceptor.groovy needManager privileges management

• OpenBoxes
• Privilege escalation

SpaceX Starlink Router Gen 3 gRPC Management get_status access control

• SpaceX Starlink Router Gen 3
• Privilege escalation
• Broken access control

D-Link DIR-842 vsftpd vsftpd.conf default permission

• D-Link DIR-842
• Privilege escalation
• Broken access control

Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision

• WebCodingPlace Real Estate Manager Pro
• Privilege escalation