Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2021-07-30 CVE-2021-34802 Improper Privilege Management vulnerability in Neo4J Graph Databse 4.2/4.3
A failure in resetting the security context in some transaction actions in Neo4j Graph Database 4.2 and 4.3 could allow authenticated users to execute commands with elevated privileges.
network
low complexity
neo4j CWE-269
8.8
2021-07-26 CVE-2020-18169 Improper Privilege Management vulnerability in Techsmith Snagit 19.1.1.2860
A vulnerability in the Windows installer XML (WiX) toolset of TechSmith Snagit 19.1.1.2860 allows attackers to escalate privileges.
local
low complexity
techsmith CWE-269
7.8
2021-07-26 CVE-2020-18171 Improper Privilege Management vulnerability in Techsmith Snagit 19.1.0.2653
TechSmith Snagit 19.1.0.2653 uses Object Linking and Embedding (OLE) which can allow attackers to obfuscate and embed crafted files used to escalate privileges.
local
low complexity
techsmith CWE-269
8.8
2021-07-23 CVE-2020-14032 Improper Privilege Management vulnerability in Asrock Box-R1000 Firmware
ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.
network
low complexity
asrock CWE-269
critical
9.8
2021-07-15 CVE-2021-33505 Improper Privilege Management vulnerability in Falco
A local malicious user can circumvent the Falco detection engine through 0.28.1 by running a program that alters arguments of system calls being executed.
local
low complexity
falco CWE-269
7.8
2021-07-12 CVE-2021-29792 Improper Privilege Management vulnerability in IBM Event Streams
IBM Event Streams 10.0, 10.1, 10.2, and 10.3 could allow a user the CA private key to create their own certificates and deploy them in the cluster and gain privileges of another user.
network
low complexity
ibm CWE-269
7.2
2021-07-12 CVE-2021-35064 Improper Privilege Management vulnerability in Kramerav Viaware
KramerAV VIAWare, all tested versions, allow privilege escalation through misconfiguration of sudo.
network
low complexity
kramerav CWE-269
critical
9.8
2021-07-08 CVE-2021-25428 Improper Privilege Management vulnerability in Google Android
Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances.
local
low complexity
google CWE-269
7.8
2021-07-08 CVE-2021-25429 Improper Privilege Management vulnerability in Google Android
Improper privilege management vulnerability in Bluetooth application prior to SMR July-2021 Release 1 allows untrusted application to access the Bluetooth information in Bluetooth application.
low complexity
google CWE-269
4.3
2021-07-07 CVE-2021-21786 Improper Privilege Management vulnerability in Iobit Advanced Systemcare Ultimate 14.2.0.220
A privilege escalation vulnerability exists in the IOCTL 0x9c406144 handling of IOBit Advanced SystemCare Ultimate 14.2.0.220.
local
low complexity
iobit CWE-269
7.8