Privilege escalation

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723,...

CVE-2020-0724

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0691, CVE-2020-0719, CVE-2020-0720, CVE-2020-0721, CVE-2020-0722, CVE-2020-0723,...

CVE-2020-0724

Technical details for CVE-2020-0724 are not provided in the connected documents; the supplied records do not reveal affected product/version, root cause, impact, or remediation beyond the generic description.

Microsoft Exchange Privilege Escalation (CVE-2019-0724)

An elevation of privilege vulnerability exists in Microsoft Exchange. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2019-0724

creationtimestamp| type| source ---|---|--- 2019-10-18 11:36:43+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/exchangewebserverpushsubscription.rb 2025-02-06 03:13:43+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23...

CVE-2019-0724

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0686...

CVE-2019-0724

CVE-2019-0724 is a Microsoft Exchange Server privilege-escalation vulnerability. Exploitation (documented in Metasploit module) can force Exchange to authenticate to an attacker-controlled URL via the PushSubscription feature, permitting NTLM relay to a Domain Controller and use of Exchange privi...

CVE-2019-0724

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0686...

Privilege escalation

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0724...

Cumulative Update 12 for Exchange Server 2016

None None...

KLA11420 Multiple vulnerabilities in Microsoft Exchange Server

Multiple elevation of privilege vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories CVE-2019-0724 CVE-2019-0686 ADV190004 Related products Microsoft-Exchange-Server CVE list CVE-2019-0724 critical...

Microsoft Exchange Privilege Escalation Exploit

This module exploits a privilege escalation vulnerability found in Microsoft Exchange - CVE-2019-0724 Execution of the module will force Exchange to authenticate to an arbitrary URL over HTTP via the Exchange PushSubscription feature. This allows us to relay the NTLM authentication to a Domain...

CVE-2018-0724

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723...

Cross site scripting

Cross-site scripting XSS vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724...

CVE-2018-0724

CVE-2018-0724 is an XSS vulnerability in QNAP Q'center Virtual Appliance 1.8.1014 and earlier. The issue allows remote attackers to inject JavaScript into the vulnerable application. The affected product is QNAP Q'center Virtual Appliance; no root cause, impact, affected versions beyond those sta...

CVE-2017-0724

CVE-2017-0724 is a denial-of-service vulnerability in the Android media framework libmpeg2. Affected product: Android. Affected versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. The connected sources describe a DoS condition in libmpeg2 but do not provide concrete technical details about the root cause, e...

Oracle Linux 7 : qemu-kvm (ELSA-2016-0724)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2016-0724 advisory. - kvm-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch bz1331412 Tenable has extracted the preceding description block directly from the Oracle Linux...

CentOS Update for libcacard CESA-2016:0724 centos7

Check the version of libcacard SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882489";...

Fedora 23 : moodle-2.9.4-1.fc23 (2016-1c10ab3c35)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...

Fedora 22 : moodle-2.8.10-1.fc22 (2016-fb2597f4eb)

Security update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 70300 C Tenable Network...