5248 matches found
Multiple MediaTek Chip CCCI Input Validation Error Vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
Multiple MediaTek chips audio DSP input validation error vulnerability
MediaTek Inc. is the world's fourth largest fab-based semiconductor company and a leader in the markets of mobile terminals, smart home applications, wireless connectivity and Internet of Things IoT products, with approximately 1.5 billion units of end products with built-in MediaTek chips hittin...
CVE-2022-22555
Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation ma...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An attacker could exploit this vulnerability to cause an elevation of privilege...
Dovecot 授权问题漏洞
Dovecot is an open source IMAP and POP3 mail server for Linux/UNIX-like systems. An authorization issue vulnerability exists in Open-Xchange Dovecot version 2.2 that stems from a possible elevation of privilege when using similar master and non-master passwords...
ShadeYouVPN.com Client 安全漏洞
ShadeYouVPN.com Client is a VPN client from ShadeYouVPN, Inc. A security vulnerability exists in ShadeYouVPN.com Client version 2.0.1.11, which originates from a Windows privilege elevation utilizing the ShadeYouVPN.com Client...
Google Android out-of-bounds write vulnerability (CNVD-2022-53369)
Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android is vulnerable to an out-of-bounds write vulnerability, which can be exploited by attackers to cause remote privilege elevation...
Marval MSM 安全漏洞
Marval MSM is an innovative IT service management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476. An attacker has exploited the vulnerability to achieve elevation of privilege, which can be used to change the passwords of other users...
HPE Version Control Repository Manager 安全漏洞
HPE Version Control Repository Manager is a version control repository manager from Wise and Technology HPE. An elevation of privilege vulnerability exists in HPE Version Control Repository Manager versions prior to 7.6.14.0, which stems from an incorrectly programmed call to an advanced local...
Thales Safenet Authentication Client 后置链接漏洞
Thales Group Thales Safenet Authentication Client is an authentication client from Thales Group, Inc. .7 and earlier versions contain an elevation of privilege vulnerability that stems from the creation of temporary files with insecure privileges, which could be exploited by a local attacker to...
Secheron SEPCOS Control and Protection Relay 安全漏洞
Secheron SEPCOS Control and Protection Relay is a relay from Secheron. Control and protect your DC panels and contact lines from short circuits and other electrical faults, and benefit from enhanced communication capabilities.An elevation of privilege vulnerability exists in the Secheron SEPCOS...
AtlasVPN 安全漏洞
AtlasVPN is a free VPN application from AtlasVPN, Inc. A security vulnerability exists in versions prior to AtlasVPN 2.42, which stems from a lack of proper security controls over named pipe messages, and is exploited by an attacker to gain privileges on a Windows computer with the AtlasVPN clien...
NocoDB Cross-Site Scripting Vulnerability
NocoDB is an open source Airtable replacement. Convert any MySql, PostgreSql, Sql Server, Sqlite, and MariaDb into a smart spreadsheet.A cross-site scripting vulnerability exists in versions of NocoDB prior to 0.91.7, which stems from a lack of data validation filtering of user-supplied data and...
SAP Adaptive Server Enterprise Elevation of Privilege Vulnerability
SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. An elevation of privilege vulnerability exists in SAP Adaptive Server Enterprise. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use the vulnerabili...
PT-2022-21864 · Ca · Ca Automic Automation
Name of the Vulnerable Software and Affected Versions: CA Automic Automation versions 12.2 through 12.3 Description: The issue concerns an insecure file creation and handling vulnerability in the Automic agent. This could potentially allow a user to elevate privileges. Recommendations: For versio...
CVE-2022-30160
Windows Advanced Local Procedure Call ALPC Elevation of Privilege Vulnerability...
CVE-2022-30154
Microsoft File Server Shadow Copy Agent Service RVSS Elevation of Privilege Vulnerability...
SAP PowerDesigner code issue vulnerability
SAP PowerDesigner, a database design software from SAP, is vulnerable to a code issue in SAP PowerDesigner Proxy version 16.7, which could be exploited by attackers to bypass system root disk access restrictions, write or create program files on the system disk root path, and elevate the privileg...
Adobe RoboHelp 授权问题漏洞
Adobe RoboHelp is a help authoring tool developed and distributed for Windows by Adobe. An authorization issue vulnerability exists in Adobe RoboHelp and Adobe RoboHelp Server 11 Update 3 and earlier versions, which stems from a vulnerability that allows a user with non-administrative privileges ...
SAP Adaptive Server Enterprise 安全漏洞
SAP Adaptive Server Enterprise ASE is a relational database server from SAP, Germany. An elevation of privilege vulnerability exists in SAP Adaptive Server Enterprise. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use the vulnerabili...