RHEL 8 : samba (RHSA-2023:0637)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0637 advisory. Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allo...

Privilege escalation

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-21796 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2022-4299

The Metricool WordPress plugin before 1.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

Microsoft Azure Elevation of Privilege Vulnerability

Microsoft Azure is an open, enterprise-class cloud computing platform from Microsoft Corporation USA. a security vulnerability exists in the Microsoft Azure Service Fabric Container. No details of the vulnerability are currently available...

CVE-2023-21764

Microsoft Exchange Server Elevation of Privilege Vulnerability...

CVE-2023-21772

Windows Kernel Elevation of Privilege Vulnerability...

CVE-2023-21752

Windows Backup Service Elevation of Privilege Vulnerability...

CVE-2023-21739

Windows Bluetooth Driver Elevation of Privilege Vulnerability...

CVE-2023-21680

Windows Win32k Elevation of Privilege Vulnerability...

CVE-2023-21561

Microsoft Cryptographic Services Elevation of Privilege Vulnerability...

CVE-2023-21532

Windows GDI Elevation of Privilege Vulnerability...

Microsoft Exchange Server Elevation of Privilege Vulnerability

...

CVE-2023-21748 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2023-21773 Windows Kernel Elevation of Privilege Vulnerability

...

CVE-2023-21558 Windows Error Reporting Service Elevation of Privilege Vulnerability

...

CVE-2023-21549 Windows SMB Witness Service Elevation of Privilege Vulnerability

...

CVE-2022-4302 White Label CMS < 2.5 - Admin+ PHP Object Injection

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present...

Samba Issues Security Updates to Patch Multiple High-Severity Vulnerabilities

Samba has released software updates to remediate multiple vulnerabilities that, if successfully exploited, could allow an attacker to take control of affected systems. The high-severity flaws, tracked as CVE-2022-38023, CVE-2022-37966, CVE-2022-37967, and CVE-2022-45141, have been patched in...