Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-49379)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, U.S.A. Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Backup Engine is one of the Windows backup engines. An elevation of...

Microsoft Windows and Microsoft Windows Server Elevation of Privilege Vulnerability (CNVD-2020-49364)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Microsoft Windows...

Adobe Lightroom Classic Insecure Library Loading Vulnerability

Adobe Lightroom is an image organization and image processing software. An insecure library loading vulnerability exists in Adobe Lightroom Classic 9.2.0.10 and earlier versions, which can be exploited by attackers to achieve elevation of privilege...

Microsoft Windows Multiple Vulnerabilities (KB4571729)

This host is missing a critical security update according to Microsoft KB4571729 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-6546

Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...

Windows GDI Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...

PT-2020-3827 · Microsoft · Windows File Server Resource Management Service +1

Name of the Vulnerable Software and Affected Versions: Windows File Server Resource Management Service affected versions not specified Description: The issue is related to the improper handling of memory by the Windows File Server Resource Management Service, which can lead to an elevation of...

PT-2020-3834 · Microsoft · Windows Accounts Control +1

Name of the Vulnerable Software and Affected Versions: Windows Accounts Control affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Accounts Control improperly handles memory. To exploit this, an attacker must...

PT-2020-3802 · Microsoft · Windows Custom Protocol Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Custom Protocol Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory due to improper handling by the Windows Custom Protocol Engine. To exploit this, an attacker must first gain...

PT-2020-3833 · Microsoft · Windows Remote Access +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Windows Remote Access, which occurs due to improper handling of memory. This can allow an attacker to elevat...

JetBrains TeamCity Elevation of Privilege Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in versions of...

CVE-2020-15825

In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15054

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

Default credentials

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15058

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15054

Affected product: TP-Link TL-PS310U (USB Network Server). Vulnerability: Elevation of privilege due to discovery of the administrative password by sniffing unencrypted UDP traffic. Root cause / vector: Unencrypted UDP traffic enables an attacker on the same network to obtain credentials and escal...

The vulnerability of the Global Protect Agent for Linux’s endpoint protection software lies in its insecure handling of privileges. This allows attackers to elevate their privileges to the root level.

The vulnerability of the Global Protect Agent for Linux endpoint protection software lies in the insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2020-44362)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Kernel component SELinux in Google Android, which can be exploited by an attacker to elevate privileges...