Vulnerabilities > Improper Privilege Management
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-04-19 | CVE-2021-20208 | Improper Privilege Management vulnerability in multiple products A flaw was found in cifs-utils in versions before 6.13. | 6.1 |
2021-04-19 | CVE-2021-21981 | Improper Privilege Management vulnerability in VMWare Nsx-T Data Center 3.1.1 VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. | 7.8 |
2021-04-15 | CVE-2021-30479 | Improper Privilege Management vulnerability in Zulip Server An issue was discovered in Zulip Server before 3.4. | 5.3 |
2021-04-15 | CVE-2021-30478 | Improper Privilege Management vulnerability in Zulip Server An issue was discovered in Zulip Server before 3.4. | 4.3 |
2021-04-12 | CVE-2020-15390 | Improper Privilege Management vulnerability in Pega Platform 8.4.0.237 pyActivity in Pega Platform 8.4.0.237 has a security misconfiguration that leads to an improper access control vulnerability via =GetWebInfo. | 9.8 |
2021-04-09 | CVE-2021-25377 | Improper Privilege Management vulnerability in Samsung Experience Service Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action. | 7.8 |
2021-04-09 | CVE-2021-25363 | Improper Privilege Management vulnerability in Google Android An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files. | 6.1 |
2021-04-09 | CVE-2021-25362 | Improper Privilege Management vulnerability in Google Android 10.0/8.1/9.0 An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files. | 6.1 |
2021-04-09 | CVE-2021-20021 | Improper Privilege Management vulnerability in Sonicwall Email Security and Hosted Email Security A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host. | 9.8 |
2021-04-09 | CVE-2021-30152 | Improper Privilege Management vulnerability in multiple products An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. | 4.3 |