7891 matches found
PT-2020-2363
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Media Foundation component of Windows operating systems. This can be exploited by a remote attacker to potentially...
PT-2020-2356
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to errors in handling objects in memory within the Windows Runtime component of the Windows operating system. It may allow an attacker to execute arbitrary code using a...
PT-2020-2845
Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to insufficient permission assignment checks for a critical resource in Microsoft Edge, allowing a remote attacker to elevate privileges and execute arbitrary code...
PT-2020-2333
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to insufficient access restrictions in the Windows Error Reporting WER service of Windows operating systems. It allows an attacker to potentially elevate their privileges...
PT-2020-2334
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to insufficient...
CVE-2020-6241: Improper Neutralization of Special Elements used in an SQL Command
SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries to elevate privileges of users in the system, leading to SQL Injection...
CVE-2020-10024
The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 a...
Input validation
Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions...
CVE-2020-10027
An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 and later versions. version 2.1.0 and later versions...
CVE-2020-10024 ARM Platform Uses Signed Integer Comparison When Validating Syscall Numbers
The arm platform-specific code uses a signed integer comparison when validating system call numbers. An attacker who has obtained code execution within a user thread is able to elevate privileges to that of the kernel. See NCC-ZEP-001 This issue affects: zephyrproject-rtos zephyr version 1.14.0 a...
CVE-2020-5837
Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...
CVE-2020-5835
Symantec Endpoint Protection Manager (SEPM), prior to version 14.3, contains a race condition in client remote deployment that may allow an authenticated, local attacker to elevate privileges on the remote machine. The issue is documented as CVE-2020-5835. Public advisories and third-party report...
CVE-2020-5837: Improper Link Resolution Before File Access
Symantec Endpoint Protection, prior to 14.3, may not respect file permissions when writing to log files that are replaced by symbolic links, which can lead to a potential elevation of privilege...
PT-2020-11867
Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.0 through 2.1.0 and later versions. Description The issue is related to the arm platform-specific code in zephyr, which uses a signed integer comparison when validating system call numbers. This allows an attacker with cod...
Service Tracing Privilege Escalation Exploit
This Metasploit module leverages a trusted file overwrite with a dll hijacking vulnerability to gain SYSTEM-level access on vulnerable Windows 10 x64 targets. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require...
McAfee Active Response (MAR) for Mac Elevation of Privilege Vulnerability
McAfee Active Response MAR is an endpoint detection and response tool for security threats from the U.S.-based McAfee. The product supports features such as rapid access to threat data, threat alerts and centralized management. A security vulnerability exists in McAfee MAR prior to version 2.4.3...
Service Tracing Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe' require...
phpList < 3.5.3 XSS Vulnerability
phpList is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:phplist:phplist"; i...
Windows 10 Insider Preview Fast win32kbase HMMarkObjectDestroy Arbitrary Code Execution Vulnerability Regression
Summary A use after free vulnerability exists in Windows 10, Insider Preview Fast 10.0.19582.1001, when a Win32k component fails to properly handle objects in memory. Successful exploitation of this vulnerability can lead to arbitrary code execution in the kernel context and elevation of...
