The vulnerability of the Windows Update Medic Service component in Windows operating systems arises from operations that go beyond the buffer limits in memory, allowing attackers to execute arbitrary code with elevated privileges.

The vulnerability of the Windows Update Medic Service component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code with elevated privileges...

CVE-2021-34810

Improper privilege management vulnerability in cgi component in Synology Download Station before 3.8.16-3566 allows remote authenticated users to execute arbitrary code via unspecified vectors...

The vulnerability of the Lasso library, related to insecure management of privileges, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Lasso library is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

Microsoft Patches Six Zero-Day Security Holes

Microsoft today released another round of security updates for Windows operating systems and supported software, including fixes for six zero-day bugs that malicious hackers already are exploiting in active attacks. Junes Patch Tuesday addresses just 49 security holes -- about half the normal...

PT-2021-3400 · Unknown · Spring Framework

Name of the Vulnerable Software and Affected Versions: Spring Framework versions 5.2.x prior to 5.2.15 Spring Framework versions 5.3.x prior to 5.3.7 Description: The issue is caused by privilege management errors in the Spring Framework platform. Exploitation of this issue may allow an attacker ...

GitLab 权限许可和访问控制问题漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. GitLab suffers from a privilege-permission and...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A privilege-granting and access-control issue vulnerability exists in macOS, which arises from the possibility that the contents of locked Notes could be accidentally unlocked. Local users can access sensitiv...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a privilege-granting and access-control issue, which arises when the Time Machine component does not properly impose security restrictions. 10.14.4 18E226, 10.14.4 18E22...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a privilege-granting and access-control issue that allows local users to access sensitive information. The following products and versions are affected: macOS: 10.14.1...

CVE-2021-29452

a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked allowing any logged in user to make th...

Schneider Electric C-Bus Toolkit 权限许可和访问控制问题漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug a C-Bus installation on a personal computer. A privilege permission and access control issue vulnerability exists in C-Bus Toolkit V1.15.7 and prior versions, which arises fr...

Popular Netop Remote Learning Software Found Vulnerable to Hacking

Cybersecurity researchers on Sunday disclosed multiple critical vulnerabilities in remote student monitoring software Netop Vision Pro that a malicious attacker could abuse to execute arbitrary code and take over Windows computers. "These findings allow for elevation of privileges and ultimately...

CVE-2020-26196

Dell EMC PowerScale OneFS versions 8.1.0-9.1.0 contain a Backup/Restore Privilege implementation issue. A user with the BackupAdmin role may potentially exploit this vulnerability resulting in the ability to write data outside of the intended file system location...

DIGSI 4 权限许可和访问控制问题漏洞

SIEMENS DIGSI 4 is a driver from SIEMENS USA. Provides device driver functionality. A privilege license and access control issue vulnerability exists in SIEMENS DIGSI 4. The vulnerability stems from the fact that several folders in \%PATH\% can be written to by a normal user, and can be exploited...

JetBrains TeamCity 安全漏洞

TeamCity is a Java-based build management and continuous integration server from JetBrains. A privilege control impropriety vulnerability exists in JetBrains TeamCity versions prior to 2020.2.1 that stems from a user being able to access another user's GitHub access token. No details of the...

NZXT CAM 信息泄露漏洞

NZXT CAM is a performance monitoring software for gaming computers from NZXT USA. The software can be used to manage computer performance, temperature, and devices to ensure that the computer is at optimal performance. NZXT CAM version 4.8.0 suffers from a Privilege Permission and Access Control...

The vulnerability of the guest OS layer of the Cisco IOS XE operating system allows a hacker to gain access to read and write system and configuration files.

The vulnerability of the Cisco IOS XE operating system’s guest layer is related to errors in privilege management. Exploiting this vulnerability can allow an attacker to gain read and write access to system and configuration files...

PT-2020-5799 · WordPress · Wordpress

Name of the Vulnerable Software and Affected Versions: WordPress versions prior to 5.5.2 Description: The issue is related to a lack of privilege management mechanism in the WordPress content management system. Exploitation of this issue can allow a remote attacker to gain access to confidential...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

PT-2020-3364 · Mysql Server +7 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 8.0.20 and prior Description: The issue is related to insufficient input validation in the Server: Security: Privileges component of the MySQL Server product. This allows a high-privileged attacker with network access vi...