125 matches found
CVE-2017-5709
CVE-2017-5709 corresponds to privilege-escalation flaws in Intel Server Platform Services Firmware 4.0. The Intel SPS kernel code could allow an unauthorized local process to access privileged content via an unspecified vector. The Huawei and CNVD entries confirm the same issue; MITRE/Intel advis...
CVE-2017-5708
CVE-2017-5708 involves privilege escalations in Intel Manageability Engine Firmware (ME) 11.0/11.5/11.6/11.7/11.10/11.20. An unauthorized process may access privileged content via an unspecified vector. Affected components: ME firmware (and related SPS/TXE stack per Intel-SA-00086). Impact is def...
CVE-2017-11783
CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...
Privilege Escalation
Moodle is vulnerable to privilege escalations. On big installations, when the sync script was run it would improperly assign a manager role to suspended student accounts, granting these accounts the same access rights as a manager role...
Schneider Electric Pelco VideoXpert Privilege Escalations
Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The application is...
The Stack Clash
What is the Stack Clash? The Stack Clash is a vulnerability in the memory management of several operating systems. It affects Linux, OpenBSD, NetBSD, FreeBSD and Solaris, on i386 and amd64. It can be exploited by attackers to corrupt memory and execute arbitrary code. Qualys researchers discovere...
Debian DLA-729-1 : tomcat7 security update
Multiple security vulnerabilities have been discovered in the Tomcat servlet and JSP engine, which may result in possible timing attacks to determine valid user names, bypass of the SecurityManager, disclosure of system properties, unrestricted access to global resources, arbitrary file overwrite...
[SECURITY] [DLA 729-1] tomcat7 security update
Package : tomcat7 Version : 7.0.28-4+deb7u7 CVE ID : CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-8735 Debian Bug : 841655 842662 842663 842664 842665 842666 845385 Multiple security vulnerabilities have been discovered in the Tomcat servlet and JSP...
DLA-729-1 tomcat7 - security update
Bulletin has no description...
Macro Expert 4.0 - Multiple Privilege Escalations
Exploit Title: Macro Expert 4.0 Multiple Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.macro-expert.com/ Software Link: http://www.macro-expert.com/download.htm Version: Software...
Fortinet FortiClient multiple security vulnerabilities
Multiple privilege escalations...
Microsoft Windows multiple security vulnerabilities
Internet Explorer and VBScript multiple security vulnerabilities, RDP code execution, Hyper-V code execution, multiple privilege escalations...
Linux kernel security vulnerabilities
DoS, privilege escalations...
X.Org X server and video drivers multiple security vulnerabilities
Multiple memory corruptions and privilege escalations...
Oracle multiple security vulnerabilities
Multiple privilege escalations via built-in Java machine...
s3dvt multiple security vulnerabilities
Multiple privilege escalations...
Apple Mac OS X multiple security vulnerabilities
Information disclosures, memory corruptions, DoS, privilege escalations, protection bypass...
Linux kernel multiple security vulnerabilities
Memory corruptions in STCP, DCCP and CIFS, KVM and pseudo tty privilege escalations, DoS...