Privilege escalation.

Improper privilege management in Oracle Corporation Oracle Database Server

• Oracle Corporation Oracle Database Server
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle HTTP Server

• Oracle Corporation Oracle HTTP Server
• Privilege escalation

Improper privilege management in Oracle Corporation Siebel CRM Deployment

• Oracle Corporation Siebel CRM Deployment
• Privilege escalation

Improper privilege management in Oracle Corporation Siebel CRM Deployment

• Oracle Corporation Siebel CRM Deployment
• Privilege escalation

Improper privilege management in Oracle Corporation Siebel CRM Deployment

• Oracle Corporation Siebel CRM Deployment
• Privilege escalation

Improper privilege management in Oracle Corporation Siebel CRM Deployment

• Oracle Corporation Siebel CRM Deployment
• Privilege escalation

Improper privilege management in Oracle Corporation Siebel CRM Deployment

• Oracle Corporation Siebel CRM Deployment
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle HTTP Server

• Oracle Corporation Oracle HTTP Server
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Outside In Technology

• Oracle Corporation Oracle Outside In Technology
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Solaris

• Oracle Corporation Oracle Solaris
• Privilege escalation

Execution with unnecessary privileges in Oracle Corporation Oracle Java SE and others

• Oracle Corporation Oracle Java SE
• Oracle Corporation Oracle GraalVM for JDK
• Privilege escalation

Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne Tools

• Oracle Corporation JD Edwards EnterpriseOne Tools
• Privilege escalation

Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne Tools

• Oracle Corporation JD Edwards EnterpriseOne Tools
• Privilege escalation

Improper privilege management in Oracle Corporation JD Edwards EnterpriseOne Tools

• Oracle Corporation JD Edwards EnterpriseOne Tools
• Privilege escalation

Improper privilege management in Oracle Corporation iProcurement

• Oracle Corporation iProcurement
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Solaris

• Oracle Corporation Oracle Solaris
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle SOA Suite

• Oracle Corporation Oracle SOA Suite
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Solaris

• Oracle Corporation Oracle Solaris
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle WebCenter Content

• Oracle Corporation Oracle WebCenter Content
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle WebCenter Content

• Oracle Corporation Oracle WebCenter Content
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle Communications Billing and Revenue Management

• Oracle Corporation Oracle Communications Billing and Revenue Management
• Privilege escalation

Missing authentication in Oracle Corporation Oracle Product Lifecycle Analytics

• Oracle Corporation Oracle Product Lifecycle Analytics
• SQL injection
• Privilege escalation

Improper privilege management in Oracle Corporation Oracle EDI Gateway

• Oracle Corporation Oracle EDI Gateway
• Privilege escalation

Improper privilege management in Oracle Corporation Siebel CRM Deployment

• Oracle Corporation Siebel CRM Deployment
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Execution with unnecessary privileges in Google Chrome

• Google Chrome
• Privilege escalation

Execution with unnecessary privileges in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Incorrect privilege assignment in AWS CICD-toolchain-for-serverless-applications

• AWS CICD-toolchain-for-serverless-applications
• Privilege escalation

aaPanel common.py GetClientIp access control

• aaPanel
• Privilege escalation
• Broken access control

A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)

• Nokia 1830 Global Express (GX)
• Privilege escalation

Console-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation

• Red Hat StreamsHub Console for Apache Kafka®
• Red Hat streams for Apache Kafka 2
• Privilege escalation

This issue was addressed by removing additional entitlements.

• Apple macOS
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

Improper privilege management in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Privilege escalation

Improper privilege management in Apple macOS

• Apple macOS
• Privilege escalation

IBM Sterling Connect:Direct for Unix Improper Privilege Management

• IBM Sterling Connect Direct for Unix
• Privilege escalation

WordPress Essential Addons for Elementor plugin <= 6.8.5 - Privilege Escalation vulnerability

• WPDeveloper Essential Addons for Elementor
• Privilege escalation

donetick History Deletion model.go CanDeleteHistory improper authorization

• donetick
• Privilege escalation
• Broken access control

light0011 cms Captcha Validation UserController.class.php access control

• light0011 cms
• Privilege escalation
• Broken access control

WordPress Login with phone number plugin <= 1.8.77 - Privilege Escalation vulnerability

• Hamid Alinia Login with phone number
• Privilege escalation

WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability

• Brainstorm Force OttoKit
• Privilege escalation

Salon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key

• Salon Booking System
• Privilege escalation

phpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API

• thorsten phpMyFAQ
• Privilege escalation

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API

• thorsten phpMyFAQ
• Privilege escalation

phpMyFAQ from 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via Group Permissions API

• thorsten phpMyFAQ
• Privilege escalation

phpMyFAQ 4.2.0-alpha.2 before 4.2.0-beta Privilege Escalation via updateUserRights

• thorsten phpMyFAQ
• Privilege escalation

Arcane: Delegated users:update permission allows admin account takeover via password reset (no privilege-hierarchy check)

• Privilege escalation

<2.6.0 · fixed in 2.6.0

IBM i is Affected By An Improper Privilege Management Vulnerability in OpenSSH

• i
• Privilege escalation

IBM i is Affected By An Improper Privilege Management Vulnerability

• i
• Privilege escalation

WhaTicket Community through commit cf04795 Admin Self-Registration via /auth/signup

• canove whaticket-community
• Privilege escalation

Mailu domain managers can take over higher-privileged accounts

• Mailu
• Privilege escalation
• Broken access control

WP Compress <= 7.25.00 - Unauthenticated Privilege Escalation to 'group'/'setting'/'value' Parameters on comms Endpoint

• aresit WP Compress – Instant Performance & Speed Optimization
• Privilege escalation

PilotPress <= 2.0.43 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover via 'username' Parameter

• ontraport PilotPress
• Privilege escalation

User Profile Builder <= 4.0.3 - Unauthenticated Privilege Escalation to 'role' Parameter via Legacy Meta-Name Collision on [wppb-register]

• cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor
• Privilege escalation

Theme My Login <= 7.2.1 - Unauthenticated Privilege Escalation via 'user_pass1' POST Parameter in wp_pre_insert_user_data Filter

• jfarthing84 Theme My Login
• Privilege escalation

My Calendar <= 3.8.7 - Unauthenticated Privilege Escalation to 'mcs' Parameter via Reflected Shortcode Injection into 'above' Attribute

• joedolson My Calendar – Accessible Event Manager
• Privilege escalation

Nexter Extension <= 4.7.11 - Authenticated (Subscriber+) Privilege Escalation to 'reset-view' Parameter

• posimyththemes Nexter Extension – Security, Performance, Code Snippets & Site Toolkit
• Privilege escalation

MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter

• properfraction MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.
• Privilege escalation

InstaWP Connect <= 0.1.4.1 - Authenticated (Subscriber+) Privilege Escalation via Role-as-Capability Admin Page and API Key Disclosure via 'instawp_sync_tab_roles' Role-as-Capability Setting

• InstaWP Connect – 1-click WP Staging & Migration
• Privilege escalation