PT-2020-3802 · Microsoft · Windows Custom Protocol Engine +1

Name of the Vulnerable Software and Affected Versions: Windows Custom Protocol Engine affected versions not specified Description: The issue is caused by a buffer overflow in memory due to improper handling by the Windows Custom Protocol Engine. To exploit this, an attacker must first gain...

PT-2020-3834 · Microsoft · Windows Accounts Control +1

Name of the Vulnerable Software and Affected Versions: Windows Accounts Control affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that occurs when the Windows Accounts Control improperly handles memory. To exploit this, an attacker must...

JetBrains TeamCity Elevation of Privilege Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A security vulnerability exists in versions of...

PT-2020-19160

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.125 Description The issue is related to an inappropriate implementation in the installer. A local attacker could potentially elevate privileges via a crafted filesystem. Recommendations For versions...

CVE-2020-15825

In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges...

CVE-2020-15825: Undefined Security Weakness

In JetBrains TeamCity before 2020.1, users with the Modify Group permission can elevate other users' privileges...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15054

TP-Link USB Network Server TL-PS310U devices before 2.079.000.t0210 allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

Default credentials

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15062

DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15058

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

CVE-2020-15054

Affected product: TP-Link TL-PS310U (USB Network Server). Vulnerability: Elevation of privilege due to discovery of the administrative password by sniffing unencrypted UDP traffic. Root cause / vector: Unencrypted UDP traffic enables an attacker on the same network to obtain credentials and escal...

PT-2020-14153

Name of the Vulnerable Software and Affected Versions Lindy 42633 4-Port USB 2.0 Gigabit Network Server version 2.078.000 Description The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing...

PT-2020-14157

Name of the Vulnerable Software and Affected Versions DIGITUS DA-70254 4-Port Gigabit Network Hub version 2.073.000.E0008 Description The issue allows an attacker on the same network to elevate privileges. This is possible because the administrative password can be discovered by sniffing...

CVE-2020-15058: Cleartext Transmission of Sensitive Information

Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic...

The vulnerability of the Global Protect Agent for Linux’s endpoint protection software lies in its insecure handling of privileges. This allows attackers to elevate their privileges to the root level.

The vulnerability of the Global Protect Agent for Linux endpoint protection software lies in the insecure management of privileges. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

Google Android AMLogic Component Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the AMLogic component dm-verity in Google Android, which can be exploited by an attacker to elevate privileges...

Google Android MediaTek component elevation of privilege vulnerability (CNVD-2020-44360)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the MediaTek component Multimedia Processing Driver in Google Android, which can be exploited by attackers to...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2020-44362)

Android is a Linux-based open source operating system jointly developed by Google Inc. and the Open Handheld Alliance OHA for short. An elevation of privilege vulnerability exists in the Kernel component SELinux in Google Android, which can be exploited by an attacker to elevate privileges...

xorg-server -- Pixel Data Uninitialized Memory Information Disclosure

The X.org project reports: Allocation for pixmap data in AllocatePixmap does not initialize the memory in xserver, it leads to leak uninitialize heap memory to clients. When the X server runs with elevated privileges. This flaw can lead to ASLR bypass, which when combined with other flaws...