621 matches found
CVE-2020-13539
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Win-911 Enterprise V4.20.13 install directory via “WIN-911 Mobile Runtime” service. Depending on the vector chosen, an attacker can overwrite various executables which could lead to escalation of t...
CVE-2020-13554
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation folder of WebAccess, an attacker can either replace binary or loaded modules to execute code with ...
CVE-2020-13536
An exploitable local privilege elevation vulnerability exists in the file system permissions of Moxa MXView series 3.1.8 installation. Depending on the vector chosen, an attacker can either add code to a script or replace a binary. By default MXViewService, which starts as a NT SYSTEM authority...
CVE-2020-13541
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Mobile-911 Server V2.5 install directory. Depending on the vector chosen, an attacker can overwrite the service executable and execute arbitrary code with System privileges or replace other files...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an authorization issue vulnerability that stems from a lack of permission checking in the shouldSkipForInitialSUW function of AdvancedPowerUsageDetail.java, which can be exploited by an attacker ...
CVE-2025-24176
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7.3, macOS Sequoia 15.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges...
G DATA Security Client 安全漏洞
G DATA Security Client is an antivirus software security client from G DATA. A security vulnerability exists in G DATA Security Client that stems from an incorrect assignment of directory permissions, resulting in local elevation of privileges...
Google Pixel suffers from an unspecified vulnerability (CNVD-2025-05537)
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an unspecified vulnerability that stems from incorrect input validation and could lead to local elevation of privilege. No details of the vulnerability are provided at this time...
Trend Micro Deep Security 安全漏洞
Trend Micro Deep Security is a server deep security protection system client from Trend Micro. A security vulnerability exists in Trend Micro Deep Security that stems from the inclusion of a privilege assignment error vulnerability that could allow a local attacker to elevate the privileges of an...
Google Pixel 安全漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an unspecified vulnerability that stems from incorrect input validation and could lead to local elevation of privilege. No details of the vulnerability are provided at this time...
Avast Free Antivirus 后置链接漏洞
Avast Free Antivirus is a suite of free antivirus software from the Czech company Avast. A backlink vulnerability exists in Avast Free Antivirus that stems from a local elevation of privilege issue that could allow an attacker to elevate privileges on an affected installation and execute arbitrar...
SolarWinds Platform 代码问题漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A code issue vulnerability exists in SolarWinds Platform versions 2024.2.1 and earlier, which stems from vulnerability to an uncontrolled local elevation of privilege...
CVE-2024-44193
A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local attacker may be able to elevate their privileges...
PT-2024-28538
Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ versions 5.0 through 5.1 Description The issue is related to an Improper Access Control vulnerability. A high-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...
WatchGuard Mobile VPN Command Injection Vulnerability
WatchGuard Mobile VPN is a VPN application from US-based WatchGuard. A security vulnerability exists in WatchGuard Mobile VPN with SSL version 12.10 and earlier, which stems from the presence of a local elevation of privilege vulnerability that could allow an attacker to execute arbitrary command...
PT-2024-27946 · Ibm · Ibm System Management For I
Name of the Vulnerable Software and Affected Versions: IBM System Management for i versions 7.2 through 7.4 Description: The issue allows a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrat...
CVE-2024-35137
IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413...
Amazon Linux 2 : tigervnc (ALAS-2024-2558)
The version of tigervnc installed on the remote host is prior to 1.8.0-24. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2558 advisory. A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited b...
Ivanti Endpoint Manager Mobile 安全漏洞
Ivanti Endpoint Manager Mobile Ivanti EPMM is a mobile management software engine from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Endpoint Manager Mobile prior to version 12.1.0.0, which stems from a local elevation of privilege vulnerability that allows an authenticated...
LG Simple Editor 安全漏洞
LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A local elevation of privilege vulnerability exists in LG Simple Editor, which can be exploited by an attacker to elevate privileges...