5248 matches found
CVE-2022-32908
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. A user may be able to elevate privileges...
Microsoft Windows Multiple Vulnerabilities (KB5017361)
This host is missing an important security update according to Microsoft KB5017361 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2022-34729
Windows GDI Elevation of Privilege Vulnerability...
CVE-2022-35803
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2022-34719
Technical details about CVE-2022-34719 are not publicly available in the provided connected documents. Monitor for updates from official sources to learn affected products, root cause, and fixes.
PT-2022-5623 · Microsoft · Windows Group Policy Preference Client +1
Name of the Vulnerable Software and Affected Versions: Windows Group Policy Preference Client affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability that allows attackers to affect the system. It is caused by improper link resolution before fi...
KLA19249 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of...
YSoft SAFEQ 6 安全漏洞
YSoft SAFEQ 6 is an Enterprise Print Management Suite solution platform from YSoft Czech Republic. A security vulnerability exists in YSoft SAFEQ 6 versions prior to 6.0.72, which stems from incorrect permissions being configured as part of the installer package for the Client V3 service, and can...
Default configuration
A flaw was found in ansible-tower where the default installation is vulnerable to job isolation escape. This flaw allows an attacker to elevate the privilege from a low privileged user to an AWX user from outside the isolated environment...
PT-2022-4637 · Measuresoft · Measuresoft Scadapro Server +1
Name of the Vulnerable Software and Affected Versions: Measuresoft ScadaPro Server and Client All Versions Description: The issue is related to the incorrect resolution of links before file access in the Measuresoft ScadaPro Server and Client. This could potentially allow a remote attacker to...
The vulnerability of the Windows Partition Management Driver in the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Windows Partition Management Driver in the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
Hardcoded credentials
Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42 Asset Management Appliance, allows an attacker to leak session IDs and elevate privileges. This issue affects: Device42 CMDB versions prior to 18.01.00...
CVE-2022-22455
IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 224989...
Google Android Elevation of Privilege Vulnerability (CNVD-2022-85762)
Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...
Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-67843)
Microsoft Azure Site Recovery ASR is a DRaaS provided by Azure for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery suffers from an elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges...
Intel PROSet/Wireless WiFi Software 加密问题漏洞
Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software, which stems from insufficient encryption strength. The vulnerability can be exploited by an attacker to elevate privileges...
Intel NUC 安全漏洞
The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC 9 Extreme Laptop Kit, which stems from improper buffer restriction. An attacker exploited the vulnerability to elevate privileges...
CVE-2022-35780
Azure Site Recovery Elevation of Privilege Vulnerability...
