5260 matches found
CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability
...
CVE-2024-43530
CVE-2024-43530 is a Windows Update Stack Elevation of Privilege vulnerability. The connected documents confirm this vulnerability affects Windows Update Stack and is associated with an elevated-privilege impact (CVE ID listed with “Obtaining elevated privileges/privilege escalation”) and a local-...
Airlift.microsoft.com Elevation of Privilege Vulnerability
Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network...
Microsoft Win32k 安全漏洞
Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32k. An attacker can exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...
Ivanti Secure Access Client 安全漏洞
Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. to enable remote secure access, supporting enterprise-class VPN connections and encrypted access to resources. An elevation of privilege vulnerability exists in Ivanti Secure Access Client, which stems from the...
PT-2024-9207 · Apache +1 · Apache Traffic Server +1
Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 9.2.0 through 9.2.5 Apache Traffic Server versions 10.0.0 through 10.0.1 Description: The issue is related to an unchecked return value that can allow Apache Traffic Server to retain privileges on startup. This...
PT-2024-10316 · Microsoft · Azure Database For Postgresql Flexible Server
Name of the Vulnerable Software and Affected Versions: Azure Database for PostgreSQL Flexible Server affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure Database for PostgreSQL Flexible Server. It is associated with a failure to...
AMD Management Console 安全漏洞
AMD Management Console is a graphical user interface GUI-based management application from UltraMicroelectronics AMD that is targeted at small and medium business SMB environments. AMD Management Console has a security vulnerability that stems from incorrect default permissions. An attacker...
PT-2024-10218 · Schneider Electric · Schneider Electric Powerlogic Hdpm6000
Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic HDPM6000 version 0.62.7 Description: The issue is related to an authorization bypass vulnerability that could allow an authorized attacker to modify values outside those defined by their privileges, potentially...
Cisco Secure Firewall Management Center Elevation of Privilege Vulnerability
Cisco Secure Firewall Management Center is a security firewall management software from Cisco. A role privilege check security vulnerability exists in the Cisco Secure Firewall Management Center WEB interface, which can be exploited by a remote attacker to submit a special request that can elevat...
CVE-2024-50616
Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job information...
Google Pixel 安全漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from allowing elevation of privilege in the ABL component...
CVE-2024-20482
CVE-2024-20482 affects Cisco Secure Firewall Management Center (FMC) web-based management interface. An authenticated user with a custom read-only role can exploit insufficient validation of role permissions to perform a write operation, potentially modifying certain parts of the configuration. T...
CVE-2024-20370
A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to elevate their administrative privileges to root. The attacker would need...
PT-2024-7973 · Nvidia · Nvidia Virtual Gpu Manager
Name of the Vulnerable Software and Affected Versions: NVIDIA Virtual GPU Manager affected versions not specified Description: The issue is related to incorrect permission assignment for a critical resource in the NVIDIA Virtual GPU Manager component. This could allow an attacker to gain...
Online Complaint Site SQL注入漏洞
Online Complaint Site is an online complaint site for janobe individual developers. A security vulnerability exists in Online Complaint Site version v.1.0, which stems from susceptibility to SQL injection attacks and allows remote attackers to elevate privileges via username and password paramete...
Acronis Cyber Files 代码问题漏洞
Acronis Cyber Files is a secure file synchronization and sharing solution from Acronis Switzerland. A code issue vulnerability exists in Acronis Cyber Files versions prior to 9.0.0x24 that stems from DLL hijacking leading to local elevation of privilege...
SolarWinds Platform 代码问题漏洞
SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A code issue vulnerability exists in SolarWinds Platform versions 2024.2.1 and earlier, which stems from vulnerability to an uncontrolled local elevation of privilege...
WordPress plugin Essential Addons for Elementor 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...