Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2020-01-15 CVE-2012-1563 Improper Privilege Management vulnerability in Joomla Joomla!
Joomla! before 2.5.3 allows Admin Account Creation.
network
low complexity
joomla CWE-269
7.5
2020-01-14 CVE-2020-0635 Improper Privilege Management vulnerability in Microsoft products
An elevation of privilege vulnerability exists in Microsoft Windows when Windows fails to properly handle certain symbolic links, aka 'Windows Elevation of Privilege Vulnerability'.
local
low complexity
microsoft CWE-269
7.8
2020-01-13 CVE-2012-4761 Improper Privilege Management vulnerability in Safend Data Protector Agent 3.4.5586.9772
A Privilege Escalation vulnerability exists in the unquoted Service Binary in SDPAgent or SDBAgent in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges.
local
low complexity
safend CWE-269
7.8
2020-01-13 CVE-2012-4760 Improper Privilege Management vulnerability in Safend Data Protector Agent 3.4.5586.9772
A Privilege Escalation vulnerability exists in the SDBagent service in Safend Data Protector Agent 3.4.5586.9772, which could let a local malicious user obtain privileges.
local
low complexity
safend CWE-269
7.8
2020-01-13 CVE-2020-6949 Improper Privilege Management vulnerability in Hashbrowncms Hashbrown CMS
A privilege escalation issue was discovered in the postUser function in HashBrown CMS through 1.3.3.
network
low complexity
hashbrowncms CWE-269
8.8
2020-01-13 CVE-2019-19728 Improper Privilege Management vulnerability in multiple products
SchedMD Slurm before 18.08.9 and 19.x before 19.05.5 executes srun --uid with incorrect privileges.
network
high complexity
schedmd opensuse debian CWE-269
7.5
2020-01-13 CVE-2012-4767 Improper Privilege Management vulnerability in Safend Data Protector Agent 3.4.5586.9772
An issue exists in Safend Data Protector Agent 3.4.5586.9772 in the securitylayer.log file in the logs.9972 directory, which could let a malicious user decrypt and potentially change the Safend security policies applied to the machine.
local
low complexity
safend CWE-269
6.1
2020-01-10 CVE-2013-6231 Improper Privilege Management vulnerability in ENG Spagobi 4.0
SpagoBI before 4.1 has Privilege Escalation via an error in the AdapterHTTP script
network
low complexity
eng CWE-269
8.8
2020-01-08 CVE-2019-19544 Improper Privilege Management vulnerability in Broadcom CA Automic Dollar Universe 5.3.3
CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges.
local
low complexity
broadcom CWE-269
7.8
2020-01-08 CVE-2016-6590 Improper Privilege Management vulnerability in Symantec products
A privilege escalation vulnerability exists when loading DLLs during boot up and reboot in Symantec IT Management Suite 8.0 prior to 8.0 HF4 and Suite 7.6 prior to 7.6 HF7, Symantec Ghost Solution Suite 3.1 prior to 3.1 MP4, Symantec Endpoint Virtualization 7.x prior to 7.6 HF7, and Symantec Encryption Desktop 10.x prior to 10.4.1, which could let a local malicious user execute arbitrary code.
local
low complexity
symantec CWE-269
7.8