CVE-2020-0628

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...

PT-2020-1286

Name of the Vulnerable Software and Affected Versions Windows 10 affected versions not specified Description The issue is related to a security feature bypass in Windows, which can be exploited to elevate privileges. This bypass vulnerability exists when third-party filters are called during a...

PT-2020-1567

Name of the Vulnerable Software and Affected Versions SAP Leasing versions prior to 6.18 EA-APPL versions 6.0 through 6.06, 6.16, and 6.17 Description The issue is related to a missing authorization check in a transaction within SAP Leasing. This could potentially allow a remote attacker to eleva...

PT-2020-1274

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue exists due to errors in handling memory objects, allowing an attacker to potentially elevate their privileges using a specially crafted application. This can affect the system...

PT-2020-1285

Name of the Vulnerable Software and Affected Versions Windows Cryptographic Services affected versions not specified Description The issue exists due to improper handling of objects in memory by the Cryptographic Services in the Windows operating system. This can allow an attacker to elevate thei...

OPENSUSE-SU-2020:0010-1 Security update for chromium, re2

This update for chromium, re2 fixes the following issues: Chromium was updated to 78.0.3904.70 boo1154806: CVE-2019-13699: Use-after-free in media CVE-2019-13700: Buffer overrun in Blink CVE-2019-13701: URL spoof in navigation CVE-2019-13702: Privilege elevation in Installer CVE-2019-13703: URL b...

PT-2020-6894

Name of the Vulnerable Software and Affected Versions QT Library versions prior to 5.14.0 QT Library versions prior to 5.12.7 QT Library versions prior to 5.9.10 Description The issue is related to an uncontrolled search path in the QT Library, which may allow an authenticated user to potentially...

CVE-2019-6330

CVE-2019-6330 pertains to HP Access Control prior to version 16.7. Multiple connected sources confirm an elevation-of-privilege vulnerability in HP Access Control, with root cause unspecified in some entries but consistently described as allowing privilege escalation. Affected software is HP Acce...

CVE-2019-6330

A potential security vulnerability has been identified in the software solution HP Access Control versions prior to 16.7. This vulnerability could potentially grant elevation of privilege...

PT-2020-11203

Name of the Vulnerable Software and Affected Versions HP Access Control versions prior to 16.7 Description A potential security issue has been identified that could grant elevation of privilege. Recommendations For HP Access Control versions prior to 16.7, update to version 16.7 or later to resol...

Design/Logic Flaw

CA Automic Dollar Universe 5.3.3 contains a vulnerability, related to the uxdqmsrv binary being setuid root, that allows local attackers to elevate privileges. This vulnerability was reported to CA several years after CA Automic Dollar Universe 5.3.3 reached End of Life EOL status on April 1, 201...

PT-2020-1561

Name of the Vulnerable Software and Affected Versions FortiSIEM affected versions not specified Description The issue is related to the use of hardcoded credentials for the tunneluser user in the security management system. This could allow a remote attacker to elevate their privileges...

Avira Operations Free Antivirus Elevation of Privilege Vulnerability

Avira Operations Free Antivirus is a suite of antivirus programs from Avira Operations. An elevation of privilege vulnerability exists in Avira Operations Free Antivirus version 15.0.1907.1514, which can be exploited by an attacker to elevate local privileges...

F5 Networks BIG-IP : F5 iRules vulnerability (K30215839)

The version of F5 Networks BIG-IP installed on the remote host is prior to 11.6.5.2 / 12.1.5.1 / 13.1.3.2 / 14.0.1.1 / 14.1.2.3 / 15.0.1.3 / 15.1.0. It is, therefore, affected by a vulnerability as referenced in the K30215839 advisory. - On BIG-IP versions 15.0.0-15.0.1.1, 14.1.0-14.1.2.2,...

Microsoft UPnP - Local Privilege Elevation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...

PT-2019-4534

Name of the Vulnerable Software and Affected Versions D-Link DIR-601 B1 version 2.00NA Description The issue is related to authentication bypass in the D-Link DIR-601 router. It does not perform authentication checks on the server side, instead relying on client-side validation, which can be...

The vulnerability of the EFI_BOOT_SERVICES component of Hewlett-Packard Development Company L.P.’s desktop workstations, personal computers, and cash registers allows a hacker to exploit their privileges.

The vulnerability of the EFIBOOTSERVICES component in microprogramming software for desktop workstations, personal computers, and payment devices of Hewlett-Packard Development Company L.P exists due to insufficient verification of input data. Exploiting this vulnerability can allow a remote...

The vulnerability of the IBM DB2 database management system, related to privilege management errors, allows a perpetrator to elevate their privileges.

The vulnerability of the IBM DB2 database management system is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2019-6685

CVE-2019-6685 affects F5 BIG-IP iRules manager. Vulnerable versions include 15.0.0–15.0.1.1, 14.1.0–14.1.2.2, 14.0.0–14.0.1, 13.1.0–13.1.3.1, 12.1.0–12.1.5, and 11.5.2–11.6.5.1. A user with access to edit iRules can create iRules that lead to elevation of privilege, configuration modification, an...

PT-2019-18267

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 11.5.2 through 11.6.5.1 F5 BIG-IP versions 12.1.0 through 12.1.5 F5 BIG-IP versions 13.1.0 through 13.1.3.1 F5 BIG-IP versions 14.0.0 through 14.0.1 F5 BIG-IP versions 14.1.0 through 14.1.2.2 F5 BIG-IP versions 15.0.0 throug...