Improper access control

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges...

CVE-2020-1017

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1006...

Microsoft Windows Multiple Vulnerabilities (KB4549951)

This host is missing a critical security update according to Microsoft KB4549951 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4549949)

This host is missing a critical security update according to Microsoft KB4549949 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4550929)

This host is missing a critical security update according to Microsoft KB4550929 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA11743 Multiple vulnerabilities in Microsoft products (ESU)

Multiple vulnerabilities were found in Microsoft products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges, cause denial of service. Below is a complete list of vulnerabilities: 1. A memory corrupti...

Facebook Oculus Desktop Elevation of Privilege Vulnerability

Facebook Oculus Desktop is a virtual desktop application from the American company Facebook that supports the operation of computers in VR. A security vulnerability exists in previous versions of Facebook Oculus Desktop 1.44.0.32849 for Windows-based platforms. The vulnerability can be exploited ...

CVE-2019-11771

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

CVE-2020-7004

CVE-2020-7004 affects VISAM VBASE Editor v11.5.0.2 and VBASE Web-Remote Module. The issue is weak or insecure permissions on the VBASE directory, enabling elevation of privileges when a privileged user runs the application. Public sources in the connected documents confirm this vulnerability and ...

Avast Antivirus Local Elevation of Privilege Vulnerability (CNVD-2020-22014)

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in the Avast Service AvastSvc.exe in versions prior to Avast Antivirus 20. An attacker can exploit the vulnerability to elevate privileg...

Critical WordPress Plugin Bug Can Lock Admins Out of Websites

A pair of security vulnerabilities in the WordPress search engine optimization SEO plugin, known as Rank Math, could allow remote cybercriminals to elevate privileges and install malicious redirects onto a target site, according to researchers. It’s a WordPress plugin with more than 200,000...

Elasticsearch Elevation of Privilege Vulnerability

Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing , and supports data indexing via HTTP using JSON. A lifting vulnerability exists in Elasticsearch versions 6.7.0 through 6.8.7 and...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect the IBM Spectrum Protect Server on AIX (CVE-2019-4473, CVE-2019-11771)

Summary There are multiple vulnerabilities in IBM Runtime Environment Java which is used by the IBM Spectrum Protect formerly Tivoli Storage Manager Server on AIX. These issues were disclosed as part of the IBM Java SDK updates in July 2019. UPDATED: 3/31/2020 with the 7.1 fix. Vulnerability...

ZendTo Elevation of Privilege Vulnerability

ZendTo is a completely free web-based system that lets you conveniently send or receive files with no limit on file size and faster speeds. An elevation of privilege vulnerability exists in versions prior to ZendTo 5.22-2 Beta. The vulnerability stems from lib/NSSDropbox.php in ZendTo failing to...

Octopus Deploy elevation of privilege vulnerability (CNVD-2020-22263)

Octopus Deploy is an automation tool for .NET, Java and other application development and deployment from Octopus Deploy Australia. An elevation of privilege vulnerability exists in Octopus Deploy versions prior to 2020.1.5, which can be exploited by an attacker to elevate privileges...

MediaWiki Elevation of Privilege Vulnerability

MediaWiki is a set of free and freely available web-based Wiki engines from the MediaWiki Wikimedia Foundation in the United States. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki 1.34.0 and earlier versions with...

Intel FPGA Programmable Acceleration Card N3000 Elevation of Privilege Vulnerability

The Intel FPGA Programmable Acceleration Card N3000 is a full-duplex 100 Gbps in-system reprogrammable acceleration card for multi-workload network application acceleration. An elevation of privilege vulnerability exists in the Intel FPGA Programmable Acceleration Card N3000. An attacker can...

CVE-2020-0877

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0788, CVE-2020-0887...

CVE-2020-0798

An elevation of privilege vulnerability exists in the Windows Installer when the Windows Installer fails to properly sanitize input leading to an insecure library loading behavior.A locally authenticated attacker could run arbitrary code with elevated system privileges, aka 'Windows Installer...

CVE-2020-0793

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly handles file operations, aka 'Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability'...