Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2019-12-13 CVE-2019-16777 Improper Privilege Management vulnerability in multiple products
Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite.
network
low complexity
npmjs opensuse oracle fedoraproject redhat CWE-269
6.5
2019-12-12 CVE-2019-19726 Improper Privilege Management vulnerability in Openbsd
OpenBSD through 6.6 allows local users to escalate to root because a check for LD_LIBRARY_PATH in setuid programs can be defeated by setting a very small RLIMIT_DATA resource limit.
local
low complexity
openbsd CWE-269
7.8
2019-12-10 CVE-2019-13738 Improper Privilege Management vulnerability in multiple products
Insufficient policy enforcement in navigation in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass site isolation via a crafted HTML page.
network
low complexity
google debian fedoraproject redhat CWE-269
6.5
2019-12-10 CVE-2013-0293 Improper Privilege Management vulnerability in Ovirt Node 2.6.01
oVirt Node: Lock screen accepts F2 to drop to shell causing privilege escalation
local
low complexity
ovirt CWE-269
7.8
2019-12-06 CVE-2019-2225 Improper Privilege Management vulnerability in Google Android
When pairing with a Bluetooth device, it may be possible to pair a malicious device without any confirmation from the user, and that device may be able to interact with the phone.
low complexity
google CWE-269
8.8
2019-12-06 CVE-2012-2148 Improper Privilege Management vulnerability in Redhat products
An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies
local
low complexity
redhat CWE-269
3.3
2019-12-06 CVE-2012-1615 Improper Privilege Management vulnerability in Fedoraproject Fedora and Sectool
A Privilege Escalation vulnerability exits in Fedoraproject Sectool due to an incorrect DBus file.
local
low complexity
fedoraproject CWE-269
7.8
2019-12-05 CVE-2012-1104 Improper Privilege Management vulnerability in multiple products
A Security Bypass vulnerability exists in the phpCAS 1.2.2 library from the jasig project due to the way proxying of services are managed.
network
low complexity
apereo debian CWE-269
5.3
2019-12-04 CVE-2018-0728 Improper Privilege Management vulnerability in Qnap Helpdesk
This improper access control vulnerability in Helpdesk allows attackers to access the system logs.
network
low complexity
qnap CWE-269
7.5
2019-12-03 CVE-2019-3990 Improper Privilege Management vulnerability in Linuxfoundation Harbor
A User Enumeration flaw exists in Harbor.
network
low complexity
linuxfoundation CWE-269
4.3