CVE-2024-33526

A Stored Cross-site Scripting XSS vulnerability in the "Import of user role and title of user role" feature in ILIAS 7 before 7.30 and ILIAS 8 before 8.11 allows remote authenticated attackers with administrative privileges to inject arbitrary web script or HTML via XML file upload...

QNAP Systems QTS和QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China's Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS and QuTS hero tha...

CVE-2024-30060

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-30035

Windows DWM Core Library Elevation of Privilege Vulnerability...

CVE-2024-30028

CVE-2024-30028 is a Windows Win32k elevation-of-privilege vulnerability. The NCSC advisory lists it under Windows Win32K with a CVSS v3.1 base score of 7.8 (HIGH) and impact: higher privileges, and notes the vulnerability is exploitable locally with low attack complexity (PR:L, AV:L) and no user ...

CVE-2024-29994

CVE-2024-29994 is Microsoft Windows SCSI Class System File Elevation of Privilege. Connected sources (NCSC advisory) list CVE-2024-29994 with CVSS v3.1 base 7.8 (high), Local attack vector, Low privileges required, no user interaction, and impact to confidentiality, integrity, and availability. T...

Win32k Elevation of Privilege Vulnerability

...

Win32k Elevation of Privilege Vulnerability

...

BeyondTrust U-Series Appliance 安全漏洞

BeyondTrust U-Series Appliance is an application from BeyondTrust USA. A security vulnerability exists in BeyondTrust U-Series Appliance versions 3.4 through prior to 4.0.3 that stems from an elevation of privilege vulnerability in the local appliance api module...

Trimble TM4Web 权限许可和访问控制问题漏洞

Trimble TM4Web is a virtual simulation platform from Trimble designed to help users create and deploy Web-based virtual reality VR and augmented reality AR applications. A privilege permission and access control issue vulnerability exists in Trimble TM4Web version 22.2.0 that stems from improper...

Huawei HarmonyOS and EMUI Stray Permissions Vulnerability

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scene distributed operating system based on a microkernel.Huawei EMUI is an emotional operating system developed by Huawei based on Android Android. Huawei HarmonyOS and EMUI are vulnerable to a stray...

CVE-2024-29993

Azure CycleCloud Elevation of Privilege Vulnerability...

CVE-2024-26242

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26235

Windows Update Stack Elevation of Privilege Vulnerability...

CVE-2024-26216

Windows File Server Resource Management Service Elevation of Privilege Vulnerability...

CVE-2024-29055

Summary (CVE-2024-29055 | Microsoft Defender for IoT) A known elevation of privilege vulnerability in Microsoft Defender for IoT. The root cause is described as inadequate access control that could allow a remote attacker to escalate privileges within the affected software. Several sources flag t...

CVE-2024-28917

Summary: CVE-2024-28917 is a cluster-scope elevation of privilege in Azure Arc-enabled Kubernetes Extension. According to connected sources, the affected component is the Azure Arc Kubernetes Extension (Cluster) and the impact is privilege escalation (obtain increased privileges). The CVSS score ...

CVE-2024-26239

COVID: CVE-2024-26239 is a Windows Telephony Server Elevation of Privilege vulnerability with LOCAL attack vector, requiring LOW privileges and no user interaction. The CVSS 3.1 base score is 7.8 (HIGH), with CONFIDENTIALITY, INTEGRITY, and AVAILABILITY impacts rated HIGH. The initial description...

CVE-2024-26211

CVE-2024-26211 is an elevation-of-privilege vulnerability affecting the Windows Remote Access Connection Manager. The CVE entry lists a HIGH base score (CVSSv3.1: 7.8; vector: LOCAL, LOW attack complexity; Privileges Required: LOW; User Interaction: NONE; Scope: UNCHANGED; Confidentiality/Integri...