Privilege escalation.

Multiple Vulnerabilities in IBM Concert Software

• IBM Concert
• Privilege escalation

Authenticated Remote File System Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)

• Hewlett Packard Enterprise (HPE) ALE
• Privilege escalation

Netdata: Local Privilege Escalation in Netdata Windows Agent installer via MSI Repair Execution

• netdata
• Privilege escalation

Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair

• netdata
• Privilege escalation
• CWE-427

HP Support Assistant - Local Escalation of Privilege

• HP Inc HP Support Assistant
• Privilege escalation

CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action

• CMP – Coming Soon & Maintenance Plugin by NiteoThemes
• Privilege escalation

Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter

• Meta Box Frontend Submission
• Privilege escalation

Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management

• Moore Threads MTT S80 Driver Package
• Privilege escalation

MaxKB: Prompt-injectable agent can lead to command execution

• 1Panel-dev MaxKB
• Command injection
• Privilege escalation

HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switching

• sysadminsmedia homebox
• Privilege escalation
• Broken access control

UVdesk core-framework before 1.1.7 Privilege Escalation via editAgent

• uvdesk core-framework
• uvdesk community-skeleton
• Privilege escalation

MISP Privilege Escalation: Read-Only API Key User Can Regain Full Role via updateLoginTime

• MISP
• Privilege escalation

Cri-o: cri-o checkpoint restore bypasses destination security context

• Red Hat Confidential Compute Attestation
• Red Hat Enterprise Linux 8
• Privilege escalation

CodeAstro QR Code Attendance Management System UserController.php save privileges management

• CodeAstro QR Code Attendance Management System
• Privilege escalation

samanhappy MCPHub Template Import Endpoint templateService.ts importTemplate privileges management

• samanhappy MCPHub
• Privilege escalation

D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

• D-Link DIR-X1860
• D-Link DIR-X1860Z
• Privilege escalation
• Broken access control

Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP

• ZTE SmartLife
• Privilege escalation

aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management

• aiyiyi121 SxDevOps
• Privilege escalation

Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via Frontend Importer

• Import and export users and customers
• Privilege escalation

Import and export users and customers < 2.5.2 - Custom Role Privilege Escalation to Administrator via caller_can_promote_users

• Import and export users and customers
• Privilege escalation

Forminator Forms < 1.57.2.1 - Authenticated Privilege Escalation via Quiz Lead-Form Import

• Forminator Forms
• Privilege escalation

SAML Single Sign On < 6.0.0 - Unauthenticated Privilege Escalation via Account Matching

• SAML Single Sign On
• Privilege escalation

Dromara UJCMS UserController UserController.java usernameExist improper authorization

• Dromara UJCMS
• Privilege escalation
• Broken access control

A password reset vulnerability in ZTE SmartLife APP

• ZTE SmartLife
• Privilege escalation

A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP

• ZTE SmartLife
• Privilege escalation

UsersWP - Social Login < 1.5.10 - Unauthenticated Account Takeover via Unverified Provider Email

• UsersWP
• Privilege escalation

WP Import Export Lite < 3.9.35 - Authenticated Privilege Escalation via User Import

• WP Import Export Lite
• Privilege escalation

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Privilege escalation

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Privilege escalation

pg_partman has privilege escalation through SQL injection in create_partition_time()

• pgpartman pg_partman
• SQL injection
• Privilege escalation

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Privilege escalation

AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups

• Privilege escalation

>=4.14.0, <4.14.2 · fixed in 4.14.2

SveltyCMS User Attribute Update Endpoint +server.ts access control

• SveltyCMS
• Privilege escalation
• Broken access control

Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter

• wpdevelop Booking Calendar
• Privilege escalation

All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure

• All-in-One WP Migration and Backup
• Privilege escalation

Grav: Missing admin.super guard on core group blueprint access field allows admin.users operator to escalate to super-admin

• Privilege escalation
• Broken access control

<2.0.14 · fixed in 2.0.14

Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors

• webrecorder browsertrix
• Command injection
• Privilege escalation

Duplicate Advisory: vm2: NodeVM builtin denylist bypass via fs/promises despite -fs, allowing host filesystem writes

• Privilege escalation

<=3.11.6 · no fixed version yet

Duplicate Advisory: vm2: NodeVM node:-prefixed negative builtin deny bypass exposes child_process

• Privilege escalation

<=3.11.6 · no fixed version yet

Improper privilege management in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others

• Dell OpenManage Server Administrator Managed Node (Patch) for Windows
• Dell OpenManage Server Administrator Managed Node for RHEL 8.10
• Privilege escalation

Improper privilege management in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others

• Dell OpenManage Server Administrator Managed Node (Patch) for Windows
• Dell OpenManage Server Administrator Managed Node for RHEL 8.10
• Privilege escalation

PuppyFW <= 0.4.4 - Subscriber+ Arbitrary Blog Options Update and Deletion Leading to Privilege Escalation

• PuppyFW
• Privilege escalation

Choose User Role at Registration for WooCommerce < 1.3.3 - Unauthenticated Privilege Escalation via Registration Role Request

• Choose User Role at Registration
• Privilege escalation

Cisco Identity Services Engine Hardening Release - Improper Privlege Management Vulnerabilities

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Privilege escalation

Improper privilege management in Dell ECS

• Dell ECS
• Privilege escalation

Privilege escalation via legacy access group creation endpoint

• Curiosity GmbH Curiosity Workspace
• Privilege escalation
• Broken access control

Security Advisory 0163

• Arista Networks EOS
• Privilege escalation

Tutor LMS 2.7.1 - < 4.0.8 - Read-Only API Key Privilege Escalation via REST Request Misclassification

• Tutor LMS
• Privilege escalation

GiveWP < 4.16.8.1 - Unauthenticated Account Takeover via Donor Email Sanitization Mismatch

• GiveWP
• Privilege escalation

JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

• jetmonsters JetFormBuilder — Dynamic Blocks Form Builder
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle VM VirtualBox

• Oracle Corporation Oracle VM VirtualBox
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management

• Oracle Corporation Oracle Hyperion Financial Management
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management

• Oracle Corporation Oracle Hyperion Financial Management
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management

• Oracle Corporation Oracle Hyperion Financial Management
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Hyperion Financial Management

• Oracle Corporation Oracle Hyperion Financial Management
• Privilege escalation