CVE-2020-0735

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0667, CVE-2020-0752...

CVE-2020-0679

An elevation of privilege vulnerability exists in the way that the Windows Function Discovery Service handles objects in memory, aka 'Windows Function Discovery Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0680, CVE-2020-0682...

Google Android Framework elevation of privilege vulnerability (CNVD-2020-07204)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Framework component of Google Android 10. No details of the vulnerability are available at this time...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2020-04527)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Kernel component Binder driver in Google Android. No details of the vulnerability are available at this time...

Google Android System elevation of privilege vulnerability (CNVD-2020-07209)

Android is a Linux-based free and open source operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 8.0, 8.1, 9, and 10. No details of the vulnerability are available at this time...

MariaDB mysql_install_db Script Elevation of Privilege Vulnerability

The MariaDB database management system is a fork of MySQL, mainly maintained by the open source community under the GPL license. MariaDB is intended to be fully compatible with MySQL, including the API and command line, making it an easy replacement for MySQL. An elevation of privilege...

SUSE SLED12 / SLES12 Security Update : systemd (SUSE-SU-2020:0331-1)

This update for systemd fixes the following issues : CVE-2020-1712 bscbsc1162108 Fix a heap use-after-free vulnerability, when asynchronous Polkit queries were performed while handling Dbus messages. A local unprivileged attacker could have abused this flaw to crash systemd services or potentiall...

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Secure Proxy

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling Secure Proxy. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-12547 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a...

Security Bulletin: Multiple Vulnerabilities in IBM java Runtime Affect IBM Sterling External Authentication Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling External Authentication Server. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-12547 DESCRIPTION: Eclipse OpenJ9 is...

Samsung Galaxy Gear series wemail_consumer_service elevation of privilege vulnerability

The Samsung Galaxy Gear series is a smartphone device. A security vulnerability exists in the Samsung Galaxy Gear series wemailconsumerservice system service, which can be exploited by a remote attacker to submit a special application request for unauthorized manipulation of a user's mailbox...

Samsung Galaxy Gear series wpa_supplicant elevation of privilege vulnerability

The Samsung Galaxy Gear series is a smartphone device. Security exists in the Samsung Galaxy Gear series wpasupplicant system service, which allows remote attackers to submit special application requests that can be utilized to elevate privileges and control the WI-FI interface...

CVE-2019-17202

CVE-2019-17202 affects FastTrack Admin By Request 6.1.0.0. The vulnerability arises in the elevation flow: users without direct access to elevation are prompted for a PIN via a challenge–response. The challenge response uses a simple algorithm that can be emulated with data (customer ID and devic...

CVE-2019-17202

FastTrack Admin By Request 6.1.0.0 supports group policies that are supposed to allow only a select range of users to elevate to Administrator privilege at will. If a user does not have direct access to the elevation feature through group policies, they are prompted to enter a PIN code in a...

Microsoft Update Notification Manager Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, a U.S. company.Microsoft Windows is a set of operating systems for use on personal devices. An elevation of privilege vulnerability exists in the way files are handled in Microsoft Update Notification...

Microsoft Windows Search Indexer elevation of privilege vulnerability (CNVD-2020-16649)

Microsoft Windows is a series of operating systems released by the American company Microsoft. An elevation of privilege vulnerability exists in the way memory objects are handled in Microsoft Windows Search Indexer. An attacker could exploit the vulnerability to execute code with elevated...

The vulnerability of the Windows operating system’s search indexer allows a hacker to enhance their privileges.

The vulnerability of the Windows Search Indexer exists due to errors in memory object handling. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2019-4473

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984...

Microsoft Windows and Microsoft Windows Server Privilege Mobilization Vulnerability (CNVD-2020-03545)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows and Windows Server,...

Microsoft Windows Multiple Vulnerabilities (KB4534293)

This host is missing a critical security update according to Microsoft KB4534293 Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

Microsoft Windows Multiple Vulnerabilities (KB4534271)

This host is missing a critical security update according to Microsoft KB4534271 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...