Microsoft windows kernel local elevation of privilege vulnerability (CNVD-2015-01619)

Microsoft Windows is a popular operating system. A local elevation of privilege vulnerability exists in Microsoft windows kernel due to the program failing to properly check and execute the emulation level. A local attacker is allowed to exploit the vulnerability to build a malicious application...

Microsoft Windows Kernel-Mode Driver Privilege Elevation Vulnerabilities (3034344)

This host is missing an important security update according to Microsoft Bulletin MS15-023. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS15-028: Vulnerability in Windows Task Scheduler Could Allow Security Feature Bypass (3030377)

The remote Windows host is affected by a security bypass vulnerability due to Windows Task Scheduler not properly validating and enforcing impersonation levels. Attackers can exploit this flaw to elevate privileges in order to execute files they have no permission to run. C Tenable Network...

MS15-026: Vulnerabilities in Exchange Server could allow elevation of privilege: March 10, 2015

None None...

MS15-023: Vulnerabilities in Kernel-mode driver could allow elevation of privilege: March 10, 2015

None None...

Google Chrome Blink Arbitrary Code Execution Vulnerability

Google Chrome is a web browsing tool developed by Google. A security vulnerability in the 'DragImage::create' function in the platform/DragImage.cpp file in Blink used in versions prior to Google Chrome 41.0.2272.76 stems from the program failing to properly initialize memory for image drawing. A...

Seagate Business NAS Firmware Vulnerabilities Disclosed

Firmware running on certain Seagate network-attached storage devices that are popular with small businesses and home offices, are vulnerable to remote attacks. Researchers at Beyond Binary, a security consulting firm in Australia, on Sunday went public with their disclosure after a nearly...

CVE-2015-0062

Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges via a crafted application that leverages incorrect impersonation handling in a process that uses the...

CVE-2015-0054

Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."...

CVE-2015-0062

Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to gain privileges via a crafted application that leverages incorrect impersonation handling in a process that uses the...

Microsoft Windows Kernel 'Win32k.sys' local elevation of privilege vulnerability (CNVD-2015-01105)

Microsoft Windows is a popular operating system. A security vulnerability in Microsoft Windows 'Win32k.sys' handling of in-memory objects allows local attackers to exploit the vulnerability to elevate privileges and execute arbitrary code in kernel context...

Microsoft Windows SeAssignPrimaryTokenPrivilege Local Elevation of Privilege Vulnerability

Microsoft Windows is a popular operating system. Microsoft Windows fails to properly verify and enforce the Impersonation level, and local users can bypass the Impersonation level security check and elevate privileges using a process that uses SeAssignPrimaryTokenPrivileg...

Privilege Elevation Issue Affecting Some Intel® Solid-State Drive Data Center Family for PCIe Products

Summary: A customer feature was added to the Intel® Solid-State Drive Data Center Family for PCIe, improving device management in the field. The initial implementation allowed for a potential privilege elevation. Description: A customer feature was added to the Intel® Solid-State Drive Data Cente...

EMC Documentum D2 Remote Privilege Elevation Vulnerability

EMC Documentum D2 is an enterprise document management software. A security vulnerability exists in a method in the Properties service of the EMC Documentum D2 WEB services component that allows a low-privileged D2 user to manipulate group privileges and elevate privileges. A remote attacker coul...

Arbitrary Write Privilege Elevation Vulnerability in Multiple BullGuard Products

BullGuard bdagent.sys is an antivirus program. An arbitrary write elevation of privilege vulnerability exists in several BullGuard products that allows local users to write data to arbitrary storage units and gain privileges via crafted 0x0022405c IOCTL calls...

Huawei Quidway Switch Elevation of Privilege Vulnerability

Huawei Quidway Switch is an Ethernet switch product from Huawei, China. A security vulnerability exists in Huawei Quidway Switch version V200R005C00SPC300. The vulnerability can be exploited by remote attackers to gain privileges with the help of specially crafted packets...

FreeBSD Local Elevation of Privilege Vulnerability (CNVD-2015-00830)

FreeBSD is a BSD-based operating system. FreeBSD suffers from a local elevation of privilege vulnerability, which allows local attackers to exploit this vulnerability to gain elevated privileges...

SAP ERP Dealer Portal Elevation of Privilege Vulnerability

SAP ERP is a set of integrated enterprise resource planning system based on customer/server structure and open system from SAP, Germany. The system supports custom reports, standardized processes and automated execution of business processes. A security vulnerability exists in Dealer Portal for S...

McAfee Data Loss Prevention Endpoint Elevation of Privilege Vulnerability

McAfee Network Data Loss Prevention monitors network traffic and protects against data loss. An elevation of privilege vulnerability exists in McAfee Data Loss Prevention Endpoint, which could allow a remote attacker to obtain elevation of privilege by sending carefully constructed commands to th...

samba: privilege elevation

Samba's Active Directory Domain Controller AD DC allows the administrator to delegate creation of user or computer accounts to specific users or groups. Samba's AD DC did not implement the additional required check on the UFSERVERTRUSTACCOUNT bit in the userAccountControl attributes. Most Samba...