CVE-2022-30192 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2017-20111 Teleopti WFM Administration privileges management

A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the component Administration. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

Bosch Ethernet switch PRA-ES8P2S Web service elevation of privilege vulnerability

Bosch Ethernet switch PRA-ES8P2S is a switch from Bosch, Germany.Bosch Ethernet switch PRA-ES8P2S Web service elevation of privilege vulnerability can be exploited by remote attackers to submit special requests that can elevate privileges to execute arbitrary commands in root context...

Apache Hadoop Elevation of Privilege Vulnerability (CNVD-2022-51055)

Apache Hadoop is an open source distributed systems infrastructure from the Apache Foundation. The product is capable of distributed processing of large amounts of data and is highly reliable, scalable, and fault-tolerant. an elevation of privilege vulnerability exists in Apache Hadoop, which ste...

Google Android Resource Management Error Vulnerability in Android (CNVD-2022-52275)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a resource management error vulnerability that originates in the WIFI Firmware and could lead to memory corruption due to post-release reuse, which could be exploited by attackers to cause remote...

CVE-2022-28225

The CVE-2022-28225 entry concerns Yandex Browser for Windows before version 22.3.3.684, where a local, low-privilege attacker can gain SYSTEM-level arbitrary code execution by manipulating symlinks to the installation file during the update process. Affected software is Yandex Browser for Windows...

CVE-2022-28225

Local privilege vulnerability in Yandex Browser for Windows prior to 22.3.3.684 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process...

CVE-2021-25261

Local privilege vulnerability in Yandex Browser for Windows prior to 22.5.0.862 allows a local, low privileged, attacker to execute arbitary code with the SYSTEM privileges through manipulating symlinks to installation file during Yandex Browser update process...

CVE-2022-21827

An improper privilege vulnerability has been discovered in Citrix Gateway Plug-in for Windows Citrix Secure Access for Windows 21.9.1.2 what could allow an attacker who has gained local access to a computer with Citrix Gateway Plug-in installed, to corrupt or delete files as SYSTEM...

CVE-2022-29126

Tablet Windows User Interface Application Core Elevation of Privilege Vulnerability...

CVE-2022-26938

Storage Spaces Direct Elevation of Privilege Vulnerability...

CVE-2022-29138 Windows Clustered Shared Volume Elevation of Privilege Vulnerability

...

Microsoft Exchange Server 权限许可和访问控制问题漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A vulnerability exists in Microsoft Exchange Server with privilege permission and access control...

Microsoft Windows Print Spooler Components 权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected: Windows ...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-47670)

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in checkSlicePermission in SliceManagerService.java, due to an input validation error, it is possible to access any slice URI, and an...

Secomea GateManager Insufficient Privilege Vulnerability

Secomea GateManager is a remote access server product from the Danish company Secomea. security vulnerability exists in versions prior to Secomea GateManager 9.7, which stems from improper handling of permissions in Secomea GateManager's Web UI, and could be exploited to allow logged-in users to...

CVE-2022-1094 Amr Users < 4.59.4 - Admin+ Stored Cross-Site Scripting

The amr users WordPress plugin before 4.59.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-43857)

Google Android is a Linux-based open-source operating system from the US company Google...

FANUC ROBOGUIDE elevation of privilege vulnerability

FANUC ROBOGUIDE is a robot simulation software from FANUC, Japan. FANUC ROBOGUIDE v9.40083.00.05 and previous versions have an elevation of privilege vulnerability. The vulnerability stems from the fact that the affected product is vulnerable to misconfigured binaries, and an attacker with...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-44609)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an elevation of privilege vulnerability that can be exploited by attackers to cause an escalation of privileges...