ChurchCRM Privilege Elevation Vulnerability

ChurchCRM is an open source CRM system for churches. ChurchCRM suffers from an elevation of privilege vulnerability that stems from the application not properly implementing an access control mechanism that directly references data transmitted from the client as an object, no details of the...

NVIDIA Isaac Launchable 安全漏洞

NVIDIA Isaac Launchable is a cloud-based, one-click deployment solution from NVIDIA. A security vulnerability exists in NVIDIA Isaac Launchable, which originates from the possibility of unwanted privileged execution that could lead to code execution, elevation of privilege, denial of service,...

RealDefense SUPERAntiSpyware 安全漏洞

RealDefense SUPERAntiSpyware is a security tool for detecting and removing malware from RealDefense USA. A security vulnerability exists in RealDefense SUPERAntiSpyware that stems from SAS Core Service exposing dangerous functions that could lead to local elevation of privilege...

VIPRE Advanced Security 安全漏洞

VIPRE Advanced Security is an antivirus security software from VIPRE Corporation. A security vulnerability exists in VIPRE Advanced Security that stems from an improperly assigned folder permissions in the product's installer, which could result in local elevation of privileges...

TradingView Desktop 代码问题漏洞

TradingView Desktop is a financial charting platform desktop client from TradingView, Inc. TradingView Desktop suffers from a code issue vulnerability that stems from a misconfiguration of the Electron framework that could lead to local elevation of privilege...

RealDefense SUPERAntiSpyware 安全漏洞

RealDefense SUPERAntiSpyware is a security tool for detecting and removing malware from RealDefense USA. A security vulnerability exists in RealDefense SUPERAntiSpyware that stems from SAS Core Service exposing dangerous functions that could lead to local elevation of privilege...

MSP360 Free Backup 后置链接漏洞

MSP360 Free Backup is a cross-platform data backup software from MSP360, Inc. MSP360 Free Backup suffers from a backlink vulnerability that stems from a link-following issue in the recovery function, which could lead to local elevation of privilege...

OrangeScrum 安全漏洞

Orangescrum is a project and task management software tool that also provides productivity tools for work organization and team collaboration. Orangescrum suffers from an elevation of privilege vulnerability, which stems from the application's failure to effectively verify the source of requests ...

Cobian Backup Gravity 代码问题漏洞

Cobian Backup Gravity is a file backup software by Luis Cobian Individual Developer. A code issue vulnerability exists in Cobian Backup Gravity version 11.2.0.582, which stems from unquoted service paths that could lead to elevation of privilege...

Wondershare MirrorGo 安全漏洞

Wondershare MirrorGo is an Android screen casting and control software from China's Wanxing Technology Wondershare. A security vulnerability exists in Wondershare MirrorGo version 2.0.11.346, which stems from improper file permissions that could lead to local elevation of privileges...

WordPress plugin HappyFiles Pro 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

Versa SASE Client for Windows 安全漏洞

Versa SASE Client for Windows is a secure networking client from Versa USA. A security vulnerability exists in Versa SASE Client for Windows versions 7.8.7 through 7.9.4, which stems from a local elevation of privilege vulnerability in the Audit Log Export feature that could lead to arbitrary...

ActFax 代码问题漏洞

ActFax is a fax server software from Activefax Austria.ActiveFax can turn your computer into a virtual fax machine, realizing the transmission of fax and Email in Windows and UNIX applications at will, suitable for all sizes of networks and stand-alone use. A code issue vulnerability exists in...

OCS Inventory NG 代码问题漏洞

OCS Inventory NG is an open source IT asset management solution. A code issue vulnerability exists in OCS Inventory NG version 2.3.0.0, which stems from unquoted service paths and could lead to elevation of privilege...

CVE-2025-65041

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...

WordPress plugin Demo Importer Plus 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security vulnerabili...

WordPress plugin Custom Fields Account Registration For Woocommerce 安全漏洞

...

SonicWALL SMA1000 安全漏洞

SonicWALL SMA1000 is a series of secure mobile access solutions from SonicWALL, Inc. that simplify end-to-end secure remote access to enterprise resources hosted across local, cloud and hybrid data centers. A security vulnerability exists in the SonicWALL SMA1000 that stems from insufficient...

Portrait Displays Dell Color Management 安全漏洞

Portrait Displays Dell Color Management is a color management software from Portrait Displays USA. A security vulnerability exists in Portrait Displays Dell Color Management version 3.3.008 and prior versions, which stems from the creation of temporary folders with weak permissions during...

Belden HiSecOS 安全漏洞

Belden HiSecOS is an operating system for industrial security routers from Belden USA. A security vulnerability exists in Belden HiSecOS version 04.0.01 that stems from mishandling of XML configuration, which could lead to elevation of privilege...