Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2020-01-15 CVE-2015-5466 Improper Privilege Management vulnerability in SIS XGI VGA Display Manager 6.14.10.1090
Silicon Integrated Systems XGI WindowsXP Display Manager (aka XGI VGA Driver Manager and VGA Display Manager) 6.14.10.1090 allows local users to gain privileges via a crafted 0x96002404 IOCTL call.
local
low complexity
sis CWE-269
7.8
2020-01-15 CVE-2015-7556 Improper Privilege Management vulnerability in Delegate 9.9.13
DeleGate 9.9.13 allows local users to gain privileges as demonstrated by the dgcpnod setuid program.
local
low complexity
delegate CWE-269
7.8
2020-01-15 CVE-2012-1563 Improper Privilege Management vulnerability in Joomla Joomla!
Joomla! before 2.5.3 allows Admin Account Creation.
network
low complexity
joomla CWE-269
7.5
2020-01-14 CVE-2020-0635 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka 'Windows Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-269
7.8
2020-01-13 CVE-2012-4761 Improper Privilege Management vulnerability in Safend Data Protector Agent 3.4.5586.9772
A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges.
local
low complexity
safend CWE-269
7.8
2020-01-13 CVE-2012-4760 Improper Privilege Management vulnerability in Safend Data Protector Agent 3.4.5586.9772
A Privilege Escalation vulnerability exists in the SDBagent service in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges.
local
low complexity
safend CWE-269
7.8
2020-01-13 CVE-2020-6949 Improper Privilege Management vulnerability in Hashbrowncms Hashbrown CMS
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3.
network
low complexity
hashbrowncms CWE-269
8.8
2020-01-13 CVE-2019-19728 Improper Privilege Management vulnerability in multiple products
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
network
high complexity
schedmd opensuse debian CWE-269
7.5
2020-01-13 CVE-2012-4767 Improper Privilege Management vulnerability in Safend Data Protector Agent 3.4.5586.9772
An issue exists in Safend Data Protector Agent 3.4.5586.9772 in the securitylayer.log file in the logs.9972 directory, which could let a malicious user decrypt and potentially change the Safend security policies applied to the machine.
local
low complexity
safend CWE-269
6.1
2020-01-10 CVE-2013-6231 Improper Privilege Management vulnerability in ENG Spagobi 4.0
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
network
low complexity
eng CWE-269
8.8