Microsoft Windows Print Configuration Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. An elevated privilege vulnerability exists in the way memory objects are handled in...

Cisco 809 and 829 Industrial Integrated Services Routers Cisco IOS Privilege Permission and Access Control Issues Vulnerability

Cisco IOS is a set of operating systems developed for its network devices.Cisco 809 Industrial Integrated Services Routers is an industrial integrated multi-service router.Cisco 829 Industrial Cisco 829 Industrial Integrated Services Routers are industrial integrated multi-service routers. A...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2020-23473)

Oracle MySQL is an open source relational database management system from Oracle Corporation, of which MySQL Server is a database server component. A security vulnerability exists in the MySQL Server 8.0.18 and prior versions of Server: Security: Privileges component of Oracle MySQL. An attacker...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. Several flaws were found in the processing of malformed HTML mail content. An HTML mail message containing malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running...

CVE-2020-1989

An incorrect privilege assignment vulnerability when writing application-specific files in the Palo Alto Networks Global Protect Agent for Linux on ARM platform allows a local authenticated user to gain root privileges on the system. This issue affects Palo Alto Networks Global Protect Agent for...

CVE-2020-11463

An issue was discovered in Deskpro before 2019.8.0. The /api/emailaccounts endpoint failed to properly validate a user's privilege, allowing an attacker to retrieve cleartext credentials of all helpdesk email accounts, including incoming and outgoing email credentials. This enables an attacker to...

Microsoft Service Fabric Privilege Vulnerability

Microsoft Service Fabric is a set of distributed system platform from Microsoft. The platform is mainly used for packaging, deployment, management of microservices and containers. An elevation of privilege vulnerability exists in Microsoft Service Fabric. A remote attacker can exploit this...

Dell Digital Delivery Default Privilege Error Vulnerability

Dell Digital Delivery is a flexible new way to purchase customizable software that allows you to purchase software with your computer and then automatically download and install that software when you receive your computer. A default permission error vulnerability exists in Dell Digital Delivery...

Unspecified Vulnerability in CloudBees Jenkins Rundeck Plugin

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version release/testing project and some timed tasks . Rundeck Plugin is used in one of the...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29424)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29420)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multip...

PT-2019-3035 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the p2pimsvc service of the Windows operating system. An attacker who successfully exploits this issue could run arbitrary code...

CloudBees Jenkins Pipeline: Shared Groovy Libraries Plugin Authorization Issue Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based continuous integration tools from CloudBees, Inc. The product is mainly used to monitor the continuous software version release/testing projects and some timed tasks . Pipeline: Shared Groovy Libraries Plugin is used in one of the plugin provid...

FreeBSD mqueuefs Privilege Access Control Issue Vulnerability

FreeBSD is a Unix-like operating system from the FreeBSD Foundation. mqueuefs is a POSIX message queue file system support module used in it. A security vulnerability exists in FreeBSD mqueuefs. This vulnerability can be exploited by a local attacker to gain access to files, directories, network...

McAfee Enterprise Security Manager Privilege Permission and Access Control Issues Vulnerability

McAfee Enterprise Security Manager ESM is a suite of security information and event management SIEM solutions from McAfee, USA. The solution supports viewing and analyzing threat intelligence as well as rapid threat prioritization and security response, and has a built-in embedded compliance...

Foxit PDF SDK ActiveX License Issue Vulnerability

Foxit PDF SDK ActiveX is China's Foxit Foxit company's a PDF software development kit, but also a visual programming components. The product provides PDF display and annotation features. A security vulnerability exists in Foxit PDF SDK ActiveX 5.5.0 and earlier versions, which stems from a lack o...

CVE-2019-0836

An elevation of privilege vulnerability exists when Windows improperly handles calls to the LUAFV driver luafv.sys, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-0730, CVE-2019-0731, CVE-2019-0796, CVE-2019-0805, CVE-2019-0841...

GOG Galaxy Elevation of Privilege Vulnerability

GOG Galaxy is a game client program. The program is used to install, launch and update games. An elevated privilege vulnerability exists in GOG Galaxy that originates from a lack of effective privilege licensing and access control measures on a networked system or product. An attacker could explo...

Cisco Common Service Platform Collector (CSPC) Privilege Permission and Access Control Vulnerability

The Cisco Common Services Platform Collector CSPC is a common services platform data collector from Cisco USA. The product analyzes network performance and identifies risks and vulnerabilities by polling Cisco devices for basic inventory and configuration data. A privilege-granting and access...