Windows Shell Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when the Windows Shell fails to validate folder shortcuts. An attacker who successfully exploited the vulnerability could elevate privileges by escaping a sandbox. To exploit this vulnerability, an attacker would require unprivileged execution on the...

Microsoft Windows Kernel Elevation of Privilege (CVE-2019-1041)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

HPE Intelligent Management Center (IMC) Elevation of Privilege Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An elevation of privilege vulnerability exists in HPE Intelligent Management Center IMC 7.3 E0506P09 and...

CVE-2019-11987

A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...

Cross site request forgery (csrf)

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM PureApplication System (January 2019 updates)

Summary Multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7, used by the IBM PureApplication System were disclosed as part of the IBM Java SDK updates in January 2019. IBM PureApplication System has addressed the vulnerabilities. Vulnerability Details CVEID: CVE-2018-18...

CVE-2018-4048

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

Security Bulletin: Vulnerabilities in IBM Java SDK (January 2019) affecting IBM Application Delivery Intelligence for IBM Z V5.1.0, V5.0.5 and V5.0.4

Summary Multiple vulnerabilities are identified in IBM® SDK Java™ Technology Edition Version 1.7 and Version 1.8 that are used by IBM Application Delivery Intelligence for IBM Z V5.1.0, V5.0.5, and V5.0.4 respectively. These issues were disclosed as part of the IBM Java SDK updates in January 201...

FreeBSD rtld execl elevation of privilege vulnerability (CNVD-2019-15522)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. An elevation of privilege vulnerability exists in the rtld function of Run-Time Link-Editor rtld in libexec/rtld-elf/rtld.c in FreeBSD versions 7.1 and 8.0. The vulnerability stems from a lack of effective...

CVE-2018-7842

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller...

Intel PROSet/Wireless WiFi Software Privilege License and Access Control Issues Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. Intel PROSet/Wireless WiFi Software is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege-granting and access-control measures in a network...

Intel TXE and Intel Converged Security and Management Engine Privilege Permission and Access Control Issues Vulnerabilities

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Design/Logic Flaw

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...

Microsoft Windows Multiple Vulnerabilities (KB4499164)

This host is missing a critical security update according to Microsoft KB4499164. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

KLA11483 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability...

PT-2019-2204 · Intel · Intel Active Management Technology

Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 11.8.65 Intel Active Management Technology versions prior to 11.11.65 Intel Active Management Technology versions prior to 11.22.65 Intel Active Management Technology versions prior to...

Siemens SIMATIC CP 1543-1 < 2.0.28 Privilege Elevation

Binary data 720091.prm...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Installation Manager and IBM Packaging Utility

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 7 used by IBM Installation Manager and IBM Packaging Utility. The IBM Installation Manager and IBM Packaging Utility have addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM InfoSphere Information Server

Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by IBM InfoSphere Information Server. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SD...

CVE-2019-1816

A vulnerability in the log subscription subsystem of the Cisco Web Security Appliance WSA could allow an authenticated, local attacker to perform command injection and elevate privileges to root. The vulnerability is due to insufficient validation of user-supplied input on the web and command-lin...