CVE-2019-1270

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'...

Description of the security update for SharePoint Enterprise Server 2016: September 10, 2019

None None...

MongoDB Server Privilege Permission and Access Control Issues Vulnerability

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server is vulnerable to a privilege license and access control issue...

GitLab Omnibus Privilege Vulnerability

Omnibus GitLab is a package of different services and tools needed to run GitLab from GitLab USA. GitLab Omnibus An elevation of privilege vulnerability exists in GitLab versions 7.4 through 12.2.1, which can be exploited by an attacker to elevate privileges...

Google Android Framework elevation of privilege vulnerability (CNVD-2019-38878)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. There is an elevation of privilege vulnerability in Framework in Android. An attacker can exploit this vulnerability to elevate...

Lenovo Solution Center Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. An elevation of privilege vulnerability exists in Lenovo Solution Center version 03.12.003, which can b...

CVE-2019-1583

CVE-2019-1583 affects Palo Alto Networks Twistlock console (version 19.07.358 and earlier). The Red Hat, CNVD, CVE lists and Palo Alto advisories describe an escalation of privileges wherein a Twistlock user with Operator capabilities can elevate to another user after interacting with an affected...

Google Android System elevation of privilege vulnerability (CNVD-2019-39722)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. There is a security vulnerability in Platform in Android version 10. The vulnerability can be exploited by an attacker to elevate privileges...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29426)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29423)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2019-1229 Dynamics On-Premise Elevation of Privilege Vulnerability

...

CVE-2019-1185 Windows Subsystem for Linux Elevation of Privilege Vulnerability

...

CVE-2019-1190 Windows Image Elevation of Privilege Vulnerability

...

CVE-2019-1179 Windows Elevation of Privilege Vulnerability

...

CVE-2019-1169

CVE-2019-1169 affects the Windows kernel via the Win32k elevation-of-privilege vulnerability. The Windows kernel-mode driver mishandles objects in memory, allowing a locally authenticated attacker to run arbitrary code in kernel mode, potentially installing programs, viewing/changing data, or cre...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Jan 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.7.24 and prior and 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...