Microsoft Endpoint Configuration Manager 权限许可和访问控制问题漏洞

Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Endpoint Configuration Manager. The vulnerability stems from an incorrect programmatic call to an advanced local...

PT-2022-2922 · Microsoft · Windows Common Log File System Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System CLFS Driver affected versions not specified Description: The issue is related to insecure privilege management in the Windows Common Log File System CLFS driver of the Microsoft Windows operating system...

KB5012649: Windows 7 and Windows Server 2008 R2 Security Update (April 2022)

The remote Windows host is missing security update 5012639 or cumulative update 5012639. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24474, CVE-2022-24481, CVE-2022-24494,...

CVE-2022-22258

The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege...

Ivanti DSM Remote 及 代码问题漏洞

Ivanti DSM Remote is a multi-platform, unified endpoint management solution from Ivanti Corporation. A security vulnerability exists in Ivanti DSM Remote version 6.3.1.1862 and prior versions, which stems from vulnerability to unquoted service paths. A local attacker can use this vulnerability to...

Vulnerabilities fixed in VMware products

Vulnerabilities have been fixed in several VMware products. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF. Bypassing authentication Circumvention of security measure Remote code...

Huawei HarmonyOS WIFI module privilege elevation vulnerability

Huawei HarmonyOS is an operating system from Huawei China. Huawei HarmonyOS WIFI module is vulnerable to elevation of privilege. The vulnerability stems from a faulty program call to a high-level native procedure. An attacker could exploit the vulnerability for elevation of privilege...

Input validation

A vulnerability in the CLI of Cisco StarOS could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this vulnerability by sending crafted commands to the CLI. A...

AZL-39870 CVE-2022-27651 affecting package cri-o for versions less than 1.21.7-2

A flaw was found in buildah where containers were incorrectly started with non-empty default permissions. A bug was found in Moby Docker Engine where containers were incorrectly started with non-empty inheritable Linux process capabilities, enabling an attacker with access to programs with...

CVE-2022-22328

IBM SterlingPartner Engagement Manager 6.2.0 could allow a malicious user to elevate their privileges and perform unintended operations to another users data. IBM X-Force ID: 218871...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Many Apple products competitive conditions problems vulnerability

Apple iOS is an operating system for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. apple macOS Big Sur is a mobile application app from Apple. apple iPadOS is an operating system for Apple iPadOS is an operating system for the iPad...

PT-2022-6726 · Podman +7 · Podman +7

Name of the Vulnerable Software and Affected Versions: Podman affected versions not specified Description: The issue is related to errors in using standard permissions, allowing an attacker to bypass security restrictions and elevate privileges. This is due to containers being started with...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which stems from an integer overflow in libstagefright that could result in an out-of-bounds write. An attacker could exploit this vulnerability to caus...

CVE-2022-22632

A logic issue was addressed with improved state management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, macOS Monterey 12.3. A malicious application may be able to elevate privileges...

CVE-2022-22639

A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges...

CVE-2022-22632

A logic issue was addressed with improved state management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, macOS Monterey 12.3. A malicious application may be able to elevate privileges...

CVE-2022-22632

CVE-2022-22632 involves a logic issue in state management that could allow privilege escalation. Apple fixed it in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, and macOS Monterey 12.3. A malicious application may be able to elevate privileges; the vulnerability is addre...

Maccms privilege elevation vulnerability

Maccms program is a complete and powerful fast website building system running in PHP MYSQL environment. Maccms has an elevation of privilege vulnerability, which can be exploited by attackers to gain privileges through the "col" and "openid" parameters in /index.php/user/login to obtain privileg...

User Profile Arbitrary Junction Creation Local Privilege Elevation

The user profile service, identified as ProfSrv, is vulnerable to a local privilege elevation vulnerability in its CreateDirectoryJunction function due to a lack of appropriate checks on the directory structure of the junctions it tries to link together. Attackers can leverage this vulnerability ...