PT-2020-3089

Name of the Vulnerable Software and Affected Versions Windows iSCSI Target Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that exists due to the improper handling of file operations by the Windows iSCSI Target Service. This...

PT-2020-3162

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. It allows an attacker to potentially elevate their privilege...

PT-2020-3160

Name of the Vulnerable Software and Affected Versions Windows Storage Services affected versions not specified Description The issue is related to errors in handling file operations, which can allow an attacker to elevate their privileges. This can impact the system, potentially allowing attacker...

PT-2020-3168

Name of the Vulnerable Software and Affected Versions Windows Credential Enrollment Manager affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Credential Enrollment Manager service. It occurs due to errors in handling objects in...

PT-2020-3193

Name of the Vulnerable Software and Affected Versions Windows ActiveX Installer Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability that exists due to the improper handling of memory by the Windows ActiveX Installer Service. To explo...

PT-2020-3082

Name of the Vulnerable Software and Affected Versions Windows Function Discovery Service affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Windows Function Discovery Service handles objects in memory. This vulnerability can ...

CVE-2020-1365: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows Event Logging Service improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Event Logging Service Elevation of Privilege Vulnerability'. This CVE ID...

PT-2020-3176

Name of the Vulnerable Software and Affected Versions Windows Push Notification Service affected versions not specified Description The issue exists due to errors in handling objects in memory within the Windows Push Notification Service of Windows operating systems. This can allow an attacker to...

PT-2020-3182

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. It allows an attacker to potentially elevate their privilege...

PT-2020-3210

Name of the Vulnerable Software and Affected Versions Windows Network Location Awareness Service affected versions not specified Description The issue is related to errors in handling objects in memory by the Windows Network Location Awareness Service, which can allow an attacker to elevate their...

PT-2020-3179

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in processing objects in memory within the Windows Geolocation Framework component of Windows operating systems. It allows an attacker to potentially elevate...

Wordpress Powie WHOIS Domain Check 0.9.31 Plugin - Persistent Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Wordpress Plugin Powie's WHOIS Domain Check 0.9.31 - Persistent Cross-Site Scripting Vendor Homepage: https://powie.de Vendor Changelog: https://wordpress.org/plugins/powies-whois/developers Software Link:...

CVE-2020-11849

Elevation of privilege and/or unauthorized access vulnerability in Micro Focus Identity Manager. Affecting versions prior to 4.7.3 and 4.8.1 hot fix 1. The vulnerability could allow information exposure that can result in an elevation of privilege or an unauthorized access...

Google Android Framework elevation of privilege vulnerability (CNVD-2020-43684)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. There is a security vulnerability in Framework in Android. An attacker can exploit the vulnerability to elevate privileges...

McAfee Total Protection Elevation of Privilege Vulnerability (CNVD-2020-53311)

McAfee Total Protection MTP is a suite of antivirus software from the American company McAfee. An elevation of privilege vulnerability exists in versions prior to McAfee MTP 16.0.R26, which can be exploited by a local attacker with a malicious script or program to create and edit files in an...

Palo Alto Networks PAN-OS 7.1.x < 8.1.12 / 8.0.x < 8.1.12 / 8.1.x < 8.1.12 / 9.0.x < 9.0.6 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.12 or 8.0.x prior to 8.1.12 or 8.1.x prior to 8.1.12 or 9.0.x prior to 9.0.6. It is, therefore, affected by a vulnerability. - An external control of path and data vulnerability in the Palo Alto Networks...

PT-2020-5380

Name of the Vulnerable Software and Affected Versions MK-AUTH version 19.01 Description The issue concerns an authentication bypass in the web login functionality. This is due to guessable credentials for the admin access to the admin/executar login.php endpoint. The vulnerability is related to...

PT-2020-5962

Name of the Vulnerable Software and Affected Versions FusionSphere OpenStack version 6.5.1 Description The issue is related to improper permissions management. The software fails to correctly assign privileges when an actor attempts to perform an action, which could allow a user to perform...

CVE-2020-7509: Improper Privilege Management

A CWE-269: Improper privilege management write vulnerability exists in Easergy T300 Firmware version 1.5.2 and older which could allow an attacker to elevate their privileges and delete files...

OpenBMC phosphor-host-ipmid elevation of privilege vulnerability

OpenBMC phosphor-host-ipmid is a dbus-based ipmid Intelligent Platform Management Interface Server from the OpenBMC community. A security vulnerability exists in the userchannel/passwdmgr.cpp file in versions of OpenBMC phosphor-host-ipmid prior to 2020-04-03, which stems from a program that...