Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2020-01-08 CVE-2016-6590 Improper Privilege Management vulnerability in Symantec products
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
4.4
2020-01-07 CVE-2019-17148 Improper Privilege Management vulnerability in Parallels Desktop 14.1.3
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop Parallels Desktop version 14.1.3 (45485).
local
low complexity
parallels CWE-269
7.2
2020-01-06 CVE-2019-19585 Improper Privilege Management vulnerability in Rconfig 3.9.3
An issue was discovered in rConfig 3.9.3.
local
low complexity
rconfig CWE-269
7.8
2019-12-31 CVE-2013-4161 Improper Privilege Management vulnerability in multiple products
gksu-polkit-0.0.3-6.fc18 was reported as fixing the issue in CVE-2012-5617 but the patch was improperly applied and it did not fixed the security issue.
7.2
2019-12-31 CVE-2019-7479 Improper Privilege Management vulnerability in Sonicwall Sonicos and Sonicosv
A vulnerability in SonicOS allow authenticated read-only admin can elevate permissions to configuration mode.
network
low complexity
sonicwall CWE-269
6.5
2019-12-30 CVE-2013-2016 Improper Privilege Management vulnerability in multiple products
A flaw was found in the way qemu v1.3.0 and later (virtio-rng) validates addresses when guest accesses the config space of a virtio device.
6.9
2019-12-30 CVE-2019-20074 Improper Privilege Management vulnerability in Netis-Systems Dl4343 Firmware
On Netis DL4323 devices, any user role can view sensitive information, such as a user password or the FTP password, via the form2saveConf.cgi page.
network
low complexity
netis-systems CWE-269
4.0
2019-12-27 CVE-2013-5027 Improper Privilege Management vulnerability in O-Dyn Collabtive 1.0
Collabtive 1.0 has incorrect access control
network
low complexity
o-dyn CWE-269
7.5
2019-12-27 CVE-2013-4975 Improper Privilege Management vulnerability in Hikvision Ds-2Cd7153-E Firmware 4.1.0B130111
Hikvision DS-2CD7153-E IP Camera has Privilege Escalation
network
low complexity
hikvision CWE-269
critical
9.0
2019-12-27 CVE-2013-4867 Improper Privilege Management vulnerability in EA Karotz Smart Rabbit Firmware 12.07.19.00
Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking
local
high complexity
ea CWE-269
6.2