Input validation

A vulnerability in the Disk Check Tool disk-check.sh for Cisco Wide Area Application Services WAAS Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges level 15 to log in to the...

CVE-2018-0352

A vulnerability in the Disk Check Tool disk-check.sh for Cisco Wide Area Application Services WAAS Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges level 15 to log in to the...

CVE-2018-0352

A vulnerability in the Disk Check Tool disk-check.sh for Cisco Wide Area Application Services WAAS Software could allow an authenticated, local attacker to elevate their privilege level to root. The attacker must have valid user credentials with super user privileges level 15 to log in to the...

DisplayLink Core Software Cleaner Application Elevation of Privilege Vulnerability

DisplayLink Core Software Cleaner Application is a dedicated removal tool for uninstalling DisplayLink software. A security vulnerability exists in DisplayLink Core Software Cleaner Application 8.2.1956. The vulnerability can be exploited to hijack a DLL and elevate its privileges to SYSTE by...

Cisco Wide Area Application Services (WAAS) Software Elevation of Privilege Vulnerability

Cisco Wide Area Application Services WAAS Software is a suite of WAN link acceleration software from Cisco, U.S.A. Disk Check Tool disk-check.sh is one of the disk checking tools. A privilege-lifting vulnerability exists in Disk Check Tool disk-check.sh in Cisco WAAS Software, which stems from th...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2018-13167)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component Mediatek WLAN TDLS. An attacker can exploit this vulnerability to achieve elevation of...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2018-13158)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1529-1)

This update for the Linux Kernel 3.12.61-5283 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Intel...

SUSE SLES12 Security Update : kernel (SUSE-SU-2018:1519-1)

This update for the Linux Kernel 3.12.74-606463 fixes several issues. The following security issues were fixed : - CVE-2017-13166: An elevation of privilege vulnerability in the kernel v4l2 video driver was fixed. bsc1085447. - CVE-2018-8897: A statement in the System Programming Guide of the Int...

macOS and Mac OS X Multiple Vulnerabilities (Security Update 2018-003)

The remote host is running Mac OS X 10.11.6 or Mac OS X 10.12.6 and is missing a security update. It is therefore, affected by multiple vulnerabilities. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid110323; scriptversion"1.9";...

Quest DR Series Disk Backup Software Elevation of Privilege Vulnerability (CNVD-2018-15909)

The Quest DR Series are disk storage and deduplication appliances. An elevation of privilege vulnerability exists in versions of Quest DR Series disk backup software prior to 4.0.3.1. An attacker can exploit this vulnerability via env to elevate privileges from web server user to root...

SAP Enterprise Financial Services Elevation of Privilege Vulnerability

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A security vulnerability exists in SAP Enterprise Financial Services, which arises from the program's failure to perform required authorization checks on authenticated users. An attacker could exploit...

Epic Games Fortnite 4.2-CL-4072250 Insecure File Permissions

i? Epic Games Fortnite 4.2-CL-4072250 Insecure File Permissions Vendor: Epic Games, Inc. Product web page: https://www.epicgames.com Affected version: 4.2-CL-4072250 4.1-CL-4053532 4.0-CL-4039451 Summary: Fortnite is a co-op sandbox survival game developed by Epic Games and People Can Fly and...

Linux kernel KVM local elevation of privilege vulnerability

The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the U.S. KVM Kernel-based Virtual Machine is a virtualization infrastructure used in it. A security vulnerability exists in the handling of anomalies by the virtual machine monitor of the KVM in...

CVE-2018-3612

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode SMM...

Input validation

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode SMM...

CVE-2018-7941

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

Authentication flaw

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

CVE-2018-7941

CVE-2018-7941 concerns Huawei iBMC V200R002C60, where an authentication bypass vulnerability exists: a remote attacker with low privileges can craft specific messages to upload authentication certificates due to improper validation of upload authority, potentially enabling privilege elevation. Th...

CVE-2018-7941

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...