Elevation of Privilege Vulnerability in FRRouting

FRRouting is FRRouting Project open source a network routing software suite running on a Unix-like platform . FRRouting security vulnerabilities , an attacker can exploit the vulnerability by creating a configuration to bypass its restrictions on the way to elevation of privilege...

Dell PowerPath Management Appliance 安全漏洞

The Dell PowerPath Management Appliance is a PowerPath host management application from Dell Inc. that offers two models: a virtual machine-based appliance and a Docker containerized appliance. An elevation of privilege vulnerability exists in Dell PowerPath Management Appliance version 3.3, whic...

PT-2022-7137 · X.Org +9 · X.Org +9

Name of the Vulnerable Software and Affected Versions: X.Org affected versions not specified Description: A security issue was found in X.Org due to the handler for the XvdiSelectVideoNotify request writing to memory after it has been freed. This can lead to local privileges elevation on systems...

Intel NUC 8 Compute Elements Access Control Error Vulnerability

Intel NUC is a small minicomputer from Intel U.S. Inc. IntelR NUC 8 Compute Elements CBWHL357.0096 previous versions have an access control error vulnerability, which stems from improper BIOS firmware access control and can be exploited by attackers for local privilege elevation...

Intel NUC 安全漏洞

Intel NUC is a small minicomputer from Intel U.S. Inc. IntelR NUC 8 Compute Elements CBWHL357.0096 previous versions have an access control error vulnerability, which stems from improper BIOS firmware access control and can be exploited by attackers for local privilege elevation...

Intel Advanced Link Analyzer Pro 代码问题漏洞

Intel Advanced Link Analyzer is an advanced link analyzer from Intel Corporation USA. Intel Advanced Link Analyzer Pro versions prior to 22.2 and Standard edition prior to 22.1.1 are vulnerable to elevation of privilege, which can be exploited by attackers to perform local elevation of privilege...

CVE-2022-41100

Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...

AZL-45345 CVE-2022-37967 affecting package samba 4.18.3-2

Windows Kerberos Elevation of Privilege Vulnerability...

CVE-2020-12930

Improper parameters handling in AMD Secure Processor ASP drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...

CVE-2020-12930

Improper parameters handling in AMD Secure Processor ASP drivers may allow a privileged attacker to elevate their privileges potentially leading to loss of integrity...

Palo Alto Networks Cortex Xsoar 数据伪造问题漏洞

Palo Alto Networks Cortex Xsoar is a Security Orchestration Automation and Response Soar platform from Palo Alto Networks, USA. Palo Alto Networks Cortex Xsoar suffers from a data forgery issue vulnerability that originates from a local elevation of privilege PE, which allows a local attacker wit...

PT-2022-5656 · Microsoft · Windows Win32 Kernel Subsystem +1

Name of the Vulnerable Software and Affected Versions: Windows Win32 Kernel Subsystem affected versions not specified Description: The issue is related to insufficient access control in the Windows Win32 Kernel Subsystem, allowing an attacker to elevate their privileges. This can impact the syste...

PT-2022-5498 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows Group Policy Services. It allows an attacker to elevate their privileges. Recommendations: At t...

PT-2022-5445 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to insufficient access control in the Windows Resilient File System ReFS, which can be exploited to elevate privileges. This can allow an...

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security...

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Singapore. It combines backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, and more. A security...

CVE-2022-20868

A vulnerability in the web-based management interface of Cisco Email Security Appliance, Cisco Secure Email and Web Manager and Cisco Secure Web Appliance could allow an authenticated, remote attacker to elevate privileges on an affected system. The attacker needs valid credentials to exploit thi...

CVE-2022-42751

CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions...

Cross site request forgery (csrf)

CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions...

CVE-2022-42751

CandidATS version 3.0.0 allows an external attacker to elevate privileges in the application. This is possible because the application suffers from CSRF. This allows to persuade an administrator to create a new account with administrative permissions...