6778 matches found
PT-2021-2360 · Microsoft · Windows Projected File System +1
Name of the Vulnerable Software and Affected Versions: Windows Projected File System affected versions not specified Description: The issue is related to insecure privilege management in the Windows Projected File System component, allowing an attacker to elevate their privileges. This can impact...
PT-2021-2413 · Microsoft · Windows Print Spooler +1
Name of the Vulnerable Software and Affected Versions: Windows Print Spooler affected versions not specified Description: The issue is related to insecure privilege management in the Windows Print Spooler component of Windows operating systems. Exploitation of this issue may allow an attacker to...
PT-2021-2370 · Microsoft · Windows Installer +1
Name of the Vulnerable Software and Affected Versions: Windows Installer affected versions not specified Description: The issue is related to insecure privilege management in the Windows Installer component of the Windows operating system. Exploitation of this issue may allow an attacker to eleva...
PT-2021-2353
Name of the Vulnerable Software and Affected Versions Windows App-V Overlay Filter affected versions not specified Description The issue is related to insecure privilege management in the Windows App-V Overlay Filter component. It allows attackers to elevate their privileges, potentially affectin...
PT-2021-2335 · Microsoft · Windows Virtual Registry Provider +1
Name of the Vulnerable Software and Affected Versions: Windows Virtual Registry Provider affected versions not specified Description: The issue is related to insecure privilege management in the Virtual Registry Provider component of the Windows operating system. Exploitation of this issue may...
PT-2021-2398 · Microsoft · Windows Media Foundation +1
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Media Foundation affected versions not specified Description: The issue is related to insecure privilege management in the Media Foundation component of Windows operating systems. It allows remote attackers to execute...
PT-2021-2338
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insecure privilege management in the DirectX component of the Windows operating system. It allows an attacker to elevate their privileges. Recommendations At the momen...
PT-2021-2422 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Remote Access Service RAS interface of Windows operating systems, which is caused by insecure privilege management. Th...
PT-2021-2412 · Microsoft · Windows Container Execution Agent +1
Name of the Vulnerable Software and Affected Versions: Windows Container Execution Agent affected versions not specified Description: The issue is related to insecure privilege management in the Windows Container Execution Agent service. It allows an attacker to elevate their privileges...
Exploit for Out-of-bounds Write in Microsoft
CVE-2021-1732-Exploit CVE-2021...
PT-2021-2337 · Microsoft · Windows Container Execution Agent +1
Name of the Vulnerable Software and Affected Versions: Windows Container Execution Agent affected versions not specified Description: The issue is related to insecure privilege management in the Windows Container Execution Agent component of the Windows operating system. It allows an attacker to...
Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1501)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-25336: Improper Privilege Management
Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent...
EulerOS Virtualization 3.0.6.6 : net-snmp (EulerOS-SA-2021-1501)
According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following.CVE-2020-15861 - Net-SNM...
EulerOS Virtualization for ARM 64 3.0.6.0 : net-snmp (EulerOS-SA-2021-1550)
According to the versions of the net-snmp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the...
CVE-2020-12528: Improper Privilege Management
An issue was discovered in MB connect line mymbCONNECT24 and mbCONNECT24 software in all versions through V2.6.2. Improper use of access validation allows a logged in user to kill web2go sessions in the account he should not have access to...
PT-2021-2273
Name of the Vulnerable Software and Affected Versions: mymbCONNECT24 and mbCONNECT24 versions through V2.6.2 Description: The issue is related to improper use of access validation, allowing a logged-in user to kill web2go sessions in an account they should not have access to. This is due to...
The vulnerability of the command-line interface (CLI) of the Azure IoT platform, which allows a malicious actor to escalate their privileges
The vulnerability of the Azure IoT Command Line Interface CLI is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
MB connect line mbCONNECT24, mymbCONNECT24
1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: MB connect line Equipment: mymbCONNECT24, mbCONNECT24 Vulnerabilities: Improper Privilege Management, Server-side Request Forgery SSRF, Cross-site Scripting, Uncontrolled Resource Consumption, Open...
Microsoft Windows Security Feature Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. Microsoft Windows suffers from a security signature vulnerability that arises from a lack of security measures such as authentication, access control, and privilege management in a...