Privilege escalation.

Improper privilege management in Oracle Corporation Oracle One-to-One Fulfillment

• Oracle Corporation Oracle One-to-One Fulfillment
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle One-to-One Fulfillment

• Oracle Corporation Oracle One-to-One Fulfillment
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Applications Manager

• Oracle Corporation Oracle Applications Manager
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Application Testing Suite

• Oracle Corporation Oracle Application Testing Suite
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Application Testing Suite

• Oracle Corporation Oracle Application Testing Suite
• Privilege escalation

Improper privilege management in Oracle Corporation PeopleSoft Enterprise FIN Inventory Brazil

• Oracle Corporation PeopleSoft Enterprise FIN Inventory Brazil
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Marketing

• Oracle Corporation Oracle Marketing
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Alert

• Oracle Corporation Oracle Alert
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle User Management

• Oracle Corporation Oracle User Management
• Privilege escalation

Improper privilege management in Oracle Corporation Applications DBA

• Oracle Corporation Applications DBA
• Privilege escalation

Improper privilege management in Oracle Corporation Applications DBA

• Oracle Corporation Applications DBA
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Quality

• Oracle Corporation Oracle Quality
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Lease and Finance Management

• Oracle Corporation Oracle Lease and Finance Management
• Privilege escalation

Authenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Privilege escalation

Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Privilege escalation

Authenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Privilege escalation

Authorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Privilege escalation

Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Privilege escalation

Authorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator

• Hewlett Packard Enterprise (HPE) EdgeConnect SD-WAN Gateways
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Flowise before 3.1.4 Cross-Tenant Organization Admin Takeover

• Flowise
• Privilege escalation

Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX

• StylemixThemes Consulting - Business, Finance WordPress Theme
• Privilege escalation

Privilege escalation in the Enterprise Policies component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Session Restore component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the DevTools component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Graphics: CanvasWebGL component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the Crash Reporting component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in Firefox for Android

• Mozilla Firefox
• Privilege escalation

Privilege escalation in the DOM: Service Workers component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Privilege escalation in the WebExtensions component

• Mozilla Firefox
• Mozilla Thunderbird
• Privilege escalation

Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins

• Red Hat Enterprise Linux 9
• Red Hat Enterprise Linux 9.6 Extended Update Support
• Privilege escalation

Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter

• arraytics Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce
• Privilege escalation

SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management

• SourceCodester College Notes Gallery Management System
• Privilege escalation

PHPGurukul Hostel Management System checklogin.php access control

• PHPGurukul Hostel Management System
• Privilege escalation
• Broken access control

Incorrect privilege assignment in the admin user-management component of Webkul Bagisto 2.4.9 allows an authenticated backend user holding only the settings.users.edit permission to escalate to full…

• Privilege escalation

Improper privilege management in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple tvOS
• Privilege escalation

Improper privilege management in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

Improper privilege management in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Privilege escalation

Improper privilege management in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Privilege escalation

Improper privilege management in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple visionOS
• Privilege escalation

Improper privilege management in Apple Safari and others

• Apple Safari
• Apple iOS and iPadOS
• Privilege escalation

cosmicstack-labs mercury-agent Shell Command Permission permissions.ts checkShellCommand privileges assignment

• cosmicstack-labs mercury-agent
• Privilege escalation

cosmicstack-labs mercury-agent Shell Command Permission Check permissions.ts PermissionManager.checkShellCommand improper authorization

• cosmicstack-labs mercury-agent
• Privilege escalation
• Broken access control

Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

• AWS iam-identity-center-team
• Privilege escalation
• CWE-1220

October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls

• Privilege escalation
• Broken access control

<3.7.17 || >=4.0.0, <4.2.23 · fixed in 3.7.17, 4.2.23

Soarkey StudentManagement Registration Workflow register.html RegisterServlet.doPost privileges management

• Soarkey StudentManagement
• Privilege escalation

Apache Syncope: Delegating users can grant unowned Roles

• Apache Software Foundation Apache Syncope
• Privilege escalation

Apache Syncope: Privilege escalation for admin user via JWT authentication

• Apache Software Foundation Apache Syncope
• Privilege escalation

Parallels Desktop local privilege escalation via appliance extract argument injection

• Parallels Desktop for Mac
• Command injection
• Privilege escalation

Local privilege escalation in the Logi Options+ updater service on Windows

• Logitech Logi Options+
• Privilege escalation

Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization

• Rizwan17 inventory-management-system
• Privilege escalation
• Broken access control

Rizwan17 inventory-management-system dashboard.php access control

• Rizwan17 inventory-management-system
• Privilege escalation
• Broken access control

jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management

• jaychouchannel Tourism-Management-System
• Privilege escalation

jaychouchannel Tourism-Management-System Authorization Interceptor AuthorizationInterceptor.java improper authorization

• jaychouchannel Tourism-Management-System
• Privilege escalation
• Broken access control

PHPGurukul Bank Locker Management System sidebar.php access control

• PHPGurukul Bank Locker Management System
• Privilege escalation
• Broken access control

vvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control

• vvbbnn00 WARP-Clash-API
• Privilege escalation
• Broken access control

lenve vhr HrMapper.xml HrInfoController.updateHr privileges management

• lenve vhr
• Privilege escalation

lenve vhr Password Update pass HrInfoController.updatePass improper authorization

• lenve vhr
• Privilege escalation
• Broken access control

Simple Membership < 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc_ref

• Simple Membership
• Privilege escalation