HPESBNW04238 rev.3 - HPE ArubaOS-CX 8000 Series Switches, Multiple UEFI Vulnerabilities

Potential Security Impact: Local: Access Restriction Bypass, Arbitrary Code Execution, Compromise of System Integrity, Elevated Privileges, Gain Extended Privileges, Increase in Privilege, memory corruption SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba 8400 Switch Series s...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Snapshot on AIX (CVE-2019-4473, CVE-2019-11771)

Summary Multiple vulnerabilities in IBM Runtime Environment Java were disclosed as part of the IBM Java SDK updates in July 2019. IBM Runtime Environment Java is used by IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager on AIX. Vulnerability Details CVEID: CVE-2019-4473...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Snapshot on AIX and Linux (CVE-2018-1890, CVE-2018-12547)

Summary Multiple vulnerabilities in IBM® Runtime Environment Java™ were disclosed as part of the IBM Java SDK updates in January 2019. IBM® Runtime Environment Java™ is used by IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager on AIX and Linux. Vulnerability Details CVEID:...

Apply those updates now: CVE bypass offers up admin privileges for Windows 10

If you’re running Windows 10, it’s time to stop delaying those patches and bring your systems up to date as soon as possible. Bleeping Computer reports that a researcher has come up with a bypass for an older bug, which could serve up some major headaches if left to fester. Those headaches will...

Linux kernel elevation of privilege vulnerability (CNVD-2022-68577)

Linux kernel is the kernel used by the Linux Foundation's open source operating system, Linux. Linux kernel 5.14-rc3 is vulnerable due to a type obfuscation flaw in eBPF program processing. By executing a carefully crafted eBPF program, an authenticated attacker could exploit this vulnerability t...

Linux kernel buffer overflow vulnerability (CNVD-2022-07634)

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable to a buffer error that originates from a double-release error in the packetsetring function in net/packet/afpacket.c. A local attacker could exploit this vulnerability to throu...

Mageia: Security Advisory (MGASA-2020-0335)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Polkit pkexec privilege elevation

Added: 01/27/2022 CVE: CVE-2021-4034 Background Polkit is a Linux package for handling policies that allow unprivileged processes to communicate with privileged processes. It includes a tool called pkexec that allows the user to execute commands as another user according to the polkit policy...

Polkit pkexec privilege elevation

Added: 01/27/2022 CVE: CVE-2021-4034 Background Polkit is a Linux package for handling policies that allow unprivileged processes to communicate with privileged processes. It includes a tool called pkexec that allows the user to execute commands as another user according to the polkit policy...

PT-2022-1974 · Microsoft · Windows Nt Os Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows NT OS Kernel affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows NT OS Kernel, which is caused by unsafe privilege management. This vulnerability can be exploited...

CVE-2022-20658

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

Design/Logic Flaw

A vulnerability in the web-based management interface of Cisco Unified Contact Center Management Portal Unified CCMP and Cisco Unified Contact Center Domain Manager Unified CCDM could allow an authenticated, remote attacker to elevate their privileges to Administrator. This vulnerability is due t...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-16342)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android elevation of privilege vulnerability can be exploited by attackers to elevate privileges...

CVE-2022-21920 Windows Kerberos Elevation of Privilege Vulnerability

...

PT-2022-1504 · Microsoft · Windows Accounts Control +1

Name of the Vulnerable Software and Affected Versions: Windows Accounts Control affected versions not specified Description: The issue is related to insecure privilege management in the Windows Accounts Control component of the Windows operating system. It allows an attacker to elevate their...

PT-2022-1843 · Microsoft · Cluster Port Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft Cluster Port Driver affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Cluster Port Driver, which can be exploited to elevate privileges in the system. This allows an...

PT-2022-1812 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Microsoft Diagnostics Hub Standard Collector affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Diagnostics Hub Standard Collector service of the Microsoft Windows operating...

PT-2022-1530 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

CVE-2022-21882

Win32k Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at January 18, 2022 4:35pm UTC reported: Looks like this is a LPE in win32k that is being exploited in the wild according to Microsoft to let attackers escalate their privileges to SYSTEM. Attack complexity on this is hig...

KLA12415 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, spoof user interface, gain privileges, cause denial of service, obtain sensitive information. Below is a complete list of...