Privilege Defined With Unsafe Actions

VMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245, CVE-2025-41246)

• Локальное повышение привилегий

vmware · aria operations29 сент. 2025 г.

In OpenXiangShan NEMU prior to 55295c4, when running with RVH (Hypervisor extension) enabled, a VS-mode guest write to the supervisor interr

• Без аутентификации

20 апр. 2026 г.

Asterisk allows `Write=originate` as sufficient permissions for code execution / `System()` dialplan

• RCE
• SSRF

asterisk · asterisk8 авг. 2024 г.

A sandboxing issue in Odoo Community 11.0 through 13.0 and Odoo Enterprise 11.0 through 13.0, when running with Python 3.6 or later, allows

• RCE

odoo · odoo22 дек. 2020 г.

A sandboxing issue in Odoo Community 15.0 and Odoo Enterprise 15.0 allows authenticated administrators to executed arbitrary code, leading t

• RCE

odoo · odoo25 апр. 2023 г.

Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-ad

red hat · red hat advanced cluster management for kubernetes 2.115 авг. 2026 г.

Results of queries for ApiListener objects include the ticket salt which allows in turn to steal (more privileged) identities

icinga · icinga15 июл. 2021 г.

Kiteworks MFT has a Privilege Defined With Unsafe Actions

accellion · kiteworks managed file transfer28 нояб. 2025 г.

An issue was discovered in DTEX DEC-M (DTEX Forwarder) 6.1.1.

28 янв. 2025 г.

Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions

apache · cassandra4 февр. 2025 г.

Privilege Defined With Unsafe Actions in pimcore/pimcore

pimcore · pimcore30 мая 2023 г.

Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole

• RCE

red hat · red hat openshift ai 3.310 авг. 2026 г.

Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability.

dell · powerscale onefs29 авг. 2023 г.

Sielco Radio Link and Analog FM Transmitters Privilege Defined With Unsafe Actions

sielco · analog fm transmitter exc5000gx firmware26 окт. 2023 г.

Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions (4.0.16 only)

apache · cassandra25 авг. 2025 г.

Business Logic Error in Universal Software's FlexCity/Kiosk

• Обход аутентификации

uni-yaz · flexcity13 февр. 2026 г.

Privilege Defined With Unsafe Actions in GitLab

gitlab · gitlab26 сент. 2025 г.

Apache Cassandra: Privilege escalation via ADD IDENTITY authorization bypass

apache · cassandra7 апр. 2026 г.

DS8900F and DS8A00 Privilege Escalation

ibm · ds8900f firmware19 авг. 2026 г.

Role Delegation - Moderately critical - Access bypass - SA-CONTRIB-2026-002

role delegation project · role delegation4 февр. 2026 г.

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to read and w

odoo · odoo25 апр. 2023 г.

A sandboxing issue in Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier allows authenticated administrators to access and

odoo · odoo25 апр. 2023 г.

BIG-IP Appliance mode external monitor vulnerability

f5 · big-ip access policy manager10 окт. 2023 г.

CVAT vulnerable to privilege escalation of users with staff status

cvat · computer vision annotation tool21 янв. 2026 г.

BIG-IP and BIG-IQ privilege escalation vulnerability

f5 · big-ip access policy manager13 мая 2026 г.