PT-2021-4387 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the win32k component of the Windows operating system. It allows an attacker to potentially elevate their privileges...

PT-2021-4386 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the win32k component of the Windows operating system. It allows an attacker to potentially elevate their privileges...

PT-2021-4373 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller, which is caused by errors in privilege management. This vulnerability can be exploited by a...

PT-2021-4428 · Microsoft · Active Directory +1

Name of the Vulnerable Software and Affected Versions: Active Directory affected versions not specified Description: The issue is related to insecure privilege management in Active Directory, which can be exploited by a remote attacker to elevate their privileges. Recommendations: At the moment,...

PT-2021-4384 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to errors in privilege management. It allows an attacker to elevate their privileges, affecting the system. Recommendations: At the moment...

PT-2021-4438

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to an elevation-of-privilege vulnerability in the Windows HTTP.sys driver, which is associated with privilege management errors. Exploitation of this issue may allow an...

PT-2021-4389 · Microsoft · Windows Appcontainer +1

Name of the Vulnerable Software and Affected Versions: Windows AppContainer affected versions not specified Description: The issue is related to errors in privilege management within the isolated software environment AppContainer of Microsoft Windows operating systems. It allows an attacker to...

PT-2021-4382 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Storage Spaces Controller, which is caused by errors in privilege management. This vulnerability can be exploited to...

CVE-2021-27664: Improper Privilege Management

Under certain configurations an unauthenticated remote user could be given access to credentials stored in the exacqVision Server...

CVE-2021-42135: Improper Privilege Management

HashiCorp Vault and Vault Enterprise 1.8.x through 1.8.4 may have an unexpected interaction between glob-related policies and the Google Cloud secrets engine. Users may, in some situations, have more privileges than intended, e.g., a user with read permission for the /gcp/roleset/ path may be abl...

Sophos HitmanPro has an unspecified vulnerability (CNVD-2021-103402)

Sophos HitmanPro is an excellent multi-engine cloud anti-virus scanner from Sophos UK.A security vulnerability exists in Sophos HitmanPro, which stems from a lack of authentication, access control, privilege management and other security measures in the network system or product. A local attacker...

The vulnerability of the management tools for virtual infrastructure, such as VMware vCenter Server and VMware Cloud Foundation, relates to insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of the management tool for virtual infrastructure, VMware vCenter Server, and the virtualization platform, VMware Cloud Foundation, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the VMware vSphere Life-cycle Manager module, a management tool for virtual infrastructure, allows a hacker to delete arbitrary files. This vulnerability exists in the VMware vCenter Server virtualization platform and the VMware Cloud Foundation.

The vulnerability of the VMware vSphere Life-cycle Manager, a management tool for virtual infrastructure, related to VMware vCenter Server and VMware Cloud Foundation virtualization platforms, is associated with privilege management errors. Exploiting this vulnerability could allow an attacker to...

Exploit for CVE-2021-1675

CVE-2021-1675-PrintNightmare Working PowerShell POC Powershel...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthor...

Exploit for Path Traversal in Vmware Cloud_Foundation

CVE-2021-21972 CVE-2021-21972 VMware vSphere Client Unauthor...

Exploit for Privilege Context Switching Error in Canonical Ubuntu_Linux

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Vers...

GitLab Enterprise Edition 安全特征问题漏洞

GitLab Enterprise Edition is a content management system GitLab is a self-hosted Git version control system project repository application developed by GitLab, Inc. using Ruby on Rails. The program can be used to access the project's file content, commit history, bug list, etc.. A security...

GitLab CE/EE 安全特征问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security signature issue vulnerability exists in GitLab...

Vulnerability of the fastrpc_internal_invoke function (drivers/misc/fastrpc.c) in the Linux operating system kernel, allowing a hacker to execute any control command

The vulnerability of the fastrpcinternalinvoke function drivers/misc/fastrpc.c in the Linux kernel is related to insecure privilege management. Exploiting this vulnerability could allow an attacker to execute arbitrary control commands...