Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2021-1517)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1732

Windows Win32k Elevation of Privilege Vulnerability...

CVE-2021-1698

Windows Win32k Elevation of Privilege Vulnerability...

Aruba ClearPass Policy Manager elevation of privilege vulnerability (CNVD-2021-13472)

Aruba ClearPass Policy Manager is a network access control NAC solution. An elevation of privilege vulnerability exists in ClearPass OnGuard prior to Aruba ClearPass Policy Manager versions 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by a locally authenticated user on Windows platfor...

Advantech WebAccess/SCADA Local Elevation of Privilege Vulnerability (CNVD-2021-11304)

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...

Advantech WebAccess/SCADA Local Elevation of Privilege Vulnerability (CNVD-2021-11306)

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A local elevation of privilege...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2021-04757)

Oracle MySQL is an open source relational database management system.MySQL Server mysqld is the MySQL server, the main program that performs most of the work in a MySQL installation. An unspecified vulnerability exists in the Server: Security: Privileges component of Oracle MySQL Server 8.0.19 an...

OSV-2018-204 UNKNOWN WRITE in __msan_memcpy.part.51

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9845 Crash type: UNKNOWN WRITE Crash state: msanmemcpy.part.51 QuickOpen::ReadRaw QuickOpen::ReadNext...

CVE-2021-1688

Windows CSC Service Elevation of Privilege Vulnerability...

CVE-2021-1654

Windows CSC Service Elevation of Privilege Vulnerability...

CVE-2021-1636

Microsoft SQL Elevation of Privilege Vulnerability...

CVE-2021-1648

Microsoft splwow64 Elevation of Privilege Vulnerability...

Microsoft SharePoint Elevation of Privilege Vulnerability

...

Active Template Library Elevation of Privilege Vulnerability

...

Local Privilege Vulnerability in VMware Antivirus Software

Ltd. was founded in 1996, is a professional anti-virus vendor with strong comprehensive strength in China, and is a high-tech software enterprise integrating the research and development, production, sales and after-sales service of anti-virus software. A local privilege extraction vulnerability...

CVE-2020-17136

Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...

CVE-2020-16963 Windows Backup Engine Elevation of Privilege Vulnerability

...

SUSE SLES12 Security Update : samba (SUSE-SU-2020:2720-1)

This update for samba fixes the following issues : Update to 4.10.18 ZeroLogon: An elevation of privilege was possible with some non default configurations when an attacker established a vulnerable Netlogon secure channel connection to a domain controller, using the Netlogon Remote Protocol MS-NR...

KLA12025 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An elevation...

SpeedFan elevation of privilege vulnerability

SpeedFan is a system monitor for Microsoft Windows that reads the temperature, voltage, and fan speed of computer components. speedFan 4.52 is vulnerable to a local elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges via a specially crafted...