CVE-2021-35469

Summary: CVE-2021-35469 affects Lexmark Printer Software G2, G3, and G4 installation packages, via an unquoted service path in a registry entry that enables local privilege escalation. The vulnerability yields SYSTEM-level impact as described by sources such as Red Hat and NVD; exploitation detai...

CVE-2021-35469

The Lexmark Printer Software G2, G3 and G4 Installation Packages have a local escalation of privilege vulnerability due to a registry entry that has an unquoted service path...

Microsoft Exchange Server Elevation of Privilege Vulnerability

...

Microsoft Exchange Server 权限许可和访问控制问题漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A vulnerability exists in Microsoft Exchange Server with privilege permission and access control...

Johnson Controls Facility Explorer 安全漏洞

Johnson Controls Facility Explorer is a monitoring controller from Johnson Controls that provides scalable system-wide monitoring and control. A security vulnerability exists in Johnson Controls Facility Explorer that stems from improper privilege management and can be exploited by an attacker to...

Google Android rw_i93_send_to_lower elevation of privilege vulnerability

Google Android is a Linux-based open source operating system from the Google Open Handheld Consortium Google. An elevation of privilege vulnerability exists in Google Android rwi93sendtolower. An attacker can exploit this vulnerability to cause a local elevation of privilege...

The vulnerability of the Intune management extension for Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Intune management extension for Windows operating systems is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Windows Kernel Elevation of Privilege Vulnerability

...

Microsoft Windows Cryptographic Services 权限许可和访问控制问题漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A vulnerability exists in Windows Cryptographic Services due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2021-54697)

Microsoft Edge is a web browser that comes with the post-Windows 10 version of the U.S. Microsoft Edge has an elevation of privilege vulnerability, and no details of the vulnerability are currently available...

CVE-2021-27657 Metasys Improper Privilege Management

Successful exploitation of this vulnerability could give an authenticated Metasys user an unintended level of access to the server file system, allowing them to access or modify system files by sending specifically crafted web messages to the Metasys system. This issue affects: Johnson Controls...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Oracle Linux 8 : dotnet5.0 (ELSA-2021-2036)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-2036 advisory. 5.0.203-1.0.1 - Add support for new Oracle release 5.0.203-1 - Update to .NET SDK 5.0.203 and Runtime 5.0.6 - Resolves: RHBZ1954328 5.0.202-1 - Update to .NET S...

Oracle Linux 8 : samba (ELSA-2021-1647)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-1647 advisory. - resolves: 1891688 - Fix CVE-2020-14323 - resolves: 1892633 - Fix CVE-2020-14318 - resolves: 1892639 - Fix CVE-2020-14383 - resolves: 1879835 - Fix...

Denial Of Service (DoS)

libdb is vulnerable to denial of service. The vulnerability exists due to an easily exploitable vulnerability which allows low privileged attacker having Local Logon privilege with logon to the infrastructure where Data Store executes to compromise Data Store...

Moderate: Red Hat Security Advisory: trousers security, bug fix, and enhancement update

An update for TrouSerS is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-66098)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in the "Container Manager Service" of Microsoft...

CVE-2021-31187 Windows WalletService Elevation of Privilege Vulnerability

...

.NET and Visual Studio Elevation of Privilege Vulnerability

...

CVE-2021-25154

A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform versions prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability...