Vulnerabilities > Improper Privilege Management
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-07-30 | CVE-2021-34802 | Improper Privilege Management vulnerability in Neo4J Graph Databse 4.2/4.3 A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges. | 8.8 |
2021-07-26 | CVE-2020-18169 | Improper Privilege Management vulnerability in Techsmith Snagit 19.1.1.2860 A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges. | 7.8 |
2021-07-26 | CVE-2020-18171 | Improper Privilege Management vulnerability in Techsmith Snagit 19.1.0.2653 TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges. | 8.8 |
2021-07-23 | CVE-2020-14032 | Improper Privilege Management vulnerability in Asrock Box-R1000 Firmware ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM. | 9.8 |
2021-07-15 | CVE-2021-33505 | Improper Privilege Management vulnerability in Falco A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed. | 7.8 |
2021-07-12 | CVE-2021-29792 | Improper Privilege Management vulnerability in IBM Event Streams IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user. | 7.2 |
2021-07-12 | CVE-2021-35064 | Improper Privilege Management vulnerability in Kramerav Viaware KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo. | 9.8 |
2021-07-08 | CVE-2021-25428 | Improper Privilege Management vulnerability in Google Android Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances. | 7.8 |
2021-07-08 | CVE-2021-25429 | Improper Privilege Management vulnerability in Google Android Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application. | 4.3 |
2021-07-07 | CVE-2021-21786 | Improper Privilege Management vulnerability in Iobit Advanced Systemcare Ultimate 14.2.0.220 A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220. | 7.8 |