Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-68743)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server. The vulnerability stems...

Microsoft OneDrive for Windows Elevation of Privilege Vulnerability (CNVD-2020-54060)

OneDrive is a file hosting service and synchronization service introduced by Microsoft as part of the Web version of Office. An elevation of privilege vulnerability exists in OneDrive for Windows. The vulnerability stems from the OneDrive for Windows desktop application not properly handling...

Google Chrome Security Bypass Vulnerability (CNVD-2020-60511)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 85.0.4183.102, which stems from insufficient policy enforcement in the installer, and could allow a local attacker to achieve elevation of privilege via specially...

Siemens License Management Utility (LMU) Elevation of Privilege Vulnerability

License Management Utility LMU is a unified license management system for Siemens Building Automation products such as Desigo CC and ABT. An elevation of privilege vulnerability exists in Siemens License Management Utility LMU. This allows a locally authenticated attacker to execute arbitrary...

Microsoft Windows Multiple Vulnerabilities (KB4577049)

This host is missing a critical security update according to Microsoft KB4577049 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4577066)

This host is missing a critical security update according to Microsoft KB4577066 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Advisory - Privilege Elevation Vulnerability in Microsoft Windows Kerberos Key Distribution Center

Microsoft released a security bulletin MS14-068 to publicly disclose a vulnerability in in Kerberos Key Distribution Center KDC. The vulnerability could allow an attacker to elevate unprivileged domain user account privileges to those of the domain administrator account. Vulnerability ID:...

PT-2020-4084 · Microsoft · Diagnostics Hub Standard Collector +1

Name of the Vulnerable Software and Affected Versions: Diagnostics Hub Standard Collector affected versions not specified Description: The issue is related to the improper handling of data operations by the Diagnostics Hub Standard Collector, which could allow an attacker to run processes in an...

PT-2020-3892 · Microsoft · Windows Common Log File System +1

Name of the Vulnerable Software and Affected Versions: Windows Common Log File System CLFS affected versions not specified Description: The issue is related to the improper handling of objects in memory by the Windows Common Log File System CLFS driver, which can lead to an elevation of privilege...

PT-2020-4286

Name of the Vulnerable Software and Affected Versions: Intel BIOS firmware versions for 8th, 9th, 10th Generation Intel Core and Intel Celeron Processor 4000 & 5000 Series Processors Description: The issue is related to a buffer overflow in the BIOS firmware, which can be exploited to potentially...

CVE-2020-3473: Incorrect Authorization

A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups withi...

CVE-2020-25045

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system...

Information disclosure

Installers of Kaspersky Security Center and Kaspersky Security Center Web Console prior to 12 & prior to 12 Patch A were vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges in the system...

PT-2020-3958

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to privilege management errors in the storvsp.sys component of the Hyper-V hardware virtualization system in Windows. It may allow an attacker to elevate their...

PT-2020-6756

Name of the Vulnerable Software and Affected Versions Joomla Component GMapFP version J3.30pro Description The issue is related to insecure permissions in the GMapFP Joomla component. An attacker can access the upload function without authentication and upload files due to unrestricted file...

PT-2020-3966

Name of the Vulnerable Software and Affected Versions: Trend Micro Vulnerability Protection version 2.0 SP2 Description: The issue is related to an authentication bypass vulnerability when LDAP authentication is enabled. This could allow an unauthenticated attacker with prior knowledge of the...

CVE-2020-3443

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

Authorization

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...

FreeBSD : xorg-server -- Multiple input validation failures in X server extensions (ffa15b3b-e6f6-11ea-8cbf-54e1ad3d6335)

The X.org project reports : All theses issuses can lead to local privileges elevation on systems where the X server is running privileged. The handler for the XkbSetNames request does not validate the request length before accessing its contents. An integer underflow exists in the handler for the...

CVE-2020-3443: Missing Authorization

A vulnerability in Cisco Smart Software Manager On-Prem SSM On-Prem could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could...