5327 matches found
Azure Bot Framework SDK Elevation of Privilege Vulnerability
Improper authorization in Azure Bot Framework SDK allows an unauthorized attacker to elevate privileges over a network...
Uniswap 安全漏洞
Uniswap is a core smart contract in the Uniswap open source. A security vulnerability exists in Uniswap version 3.0, which stems from the modifyPosition function potentially leading to elevation of privilege...
Logic Flaw Vulnerability in MSS Streaming Media Server at Suzhou Kodak Technology Co.
Ltd. is a leading provider of video and security products and solutions. A logic flaw vulnerability exists in the MSS streaming media server of Suzhou Kedar Technology Co. Ltd. that can be exploited by an attacker to illegally create a new user account and elevate privileges during login...
CVE-2025-23375
Dell PowerProtect Data Manager Reporting, versions 19.17, contains an Incorrect Use of Privileged APIs vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
WordPress plugin Order Delivery Date 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
Acronis Cyber Protect Cloud Agent 安全漏洞
Acronis Cyber Protect Cloud Agent is a cloud agent from Acronis Switzerland. A security vulnerability exists in Acronis Cyber Protect Cloud Agent versions prior to 39904, which stems from insecure folder permissions that could lead to local elevation of privileges...
Bdrive NetDrive 代码问题漏洞
Bdrive NetDrive is a network drive from Bdrive that connects to various cloud services or remote file storage. A code issue vulnerability exists in Bdrive NetDrive that stems from loading an OpenSSL configuration file from a non-secure location, which could result in local elevation of privilege...
Memory release followed by re-exploitation vulnerability in several Apple products
visionOS is an AR eyewear system announced by Apple on June 6, 2023 at the 2023 Apple Worldwide Developers Conference, which will be featured for the first time in the Apple Vision Pro. tvOS is an iOS-based television operating system developed by Apple. watchOS is a set of watch operating system...
Rancher 安全漏洞
Rancher is an open source container management platform from the US-based Rancher Open Source, built for organizations deploying containers in production environments. A security vulnerability exists in Rancher versions 2.7.0 up to and including 2.7.14 and 2.8.0 up to and including 2.8.5, which...
CVE-2023-41076
An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vulnerable code...
CVE-2023-41076
An app may be able to elevate privileges. This issue is fixed in macOS 14. This issue was addressed by removing the vulnerable code...
CVE-2023-41076
CVE-2023-41076 describes an elevation of privilege in macOS where an app could gain higher rights. The issue is fixed in macOS 14 by removing the vulnerable code path. The CVSS metrics in the document set indicate a base score of 7.3 (HIGH), with attack vector listed as NETWORK, attack complexity...
Security Updates for Microsoft Office Products C2R (April 2025)
The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2025-27745, CVE-2025-27746,...
Security Updates for SQL Server Management Studio (April 2025)
The SQL Server Management Studio installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2025-29803 %NASLMINLEVEL 70300 C Tenab...
CVE-2025-26647
Improper input validation in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network...
Micro-Star MSI Center 安全漏洞
Micro-Star MSI Center is a monitoring and management platform from Micro-Star China. You can find all your favorite features such as Game Mode or Smart Priority in the Feature Set page. A security vulnerability exists in Micro-Star MSI Center versions prior to 2.0.52.0, which stems from a TOCTOU...
Microsoft Office 2016 Multiple Vulnerabilities (KB5002700)
This host is missing an important security update according to Microsoft KB5002700 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Vulnerability fixed in Microsoft System Center
Microsoft has fixed a vulnerability in System Center. The vulnerability allows a malicious person through an untrusted path within System Center, to elevate local permissions. For successful exploitation, the malicious party must have access to the device to reach the System Center Windows...
