Bitdefender Antivirus for Mac Permission License and Access Control Issues Vulnerability

SOFTWIN BitDefender Antivirus is a suite of antivirus programs from the Romanian company SOFTWIN. A privilege permission and access control issue vulnerability exists in the AntivirusforMac binary in Bitdefender Antivirus for Mac. An attacker can exploit the vulnerability to execute third-party...

CVE-2020-0747

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka 'Windows Data Sharing Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0659...

CVE-2020-0692

An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'...

CVE-2020-0683

An elevation of privilege vulnerability exists in the Windows Installer when MSI packages process symbolic links, aka 'Windows Installer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0686...

CVE-2020-0667

An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0666, CVE-2020-0735, CVE-2020-0752...

CVE-2020-0663

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used t...

CVE-2020-0665

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'...

Connected Devices Platform Service Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that the Connected Devices Platform Service handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14341)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.8 - 12.7.2 suffers from an insecure privilege...

CVE-2020-0737: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the tapisrv.dll handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0739...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14343)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.0 - 12.7.2 suffers from an insecure privilege...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14339)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE is a GitLab Enterprise Edition GitLab EE...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14342)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 12.2 suffers from an insecure privilege...

Microsoft Win32k Elevation of Privilege (CVE-2020-0731)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Security Bulletin: IBM has released Unified Extensible Firmware Interface (UEFI) fixes in response to Intel escalation of privilege vulnerability.

Summary IBM has released the Unified Extensible Firmware Interface UEFI fixes for System x, Flex and BladeCenter systems in response to the following Intel escalation of privilege vulnerability. Vulnerability Details CVEID: CVE-2019-0151 DESCRIPTION: Insufficient memory protection in IntelR TXT f...

CVE-2018-16270

Samsung Galaxy Gear series before build RE2 includes the hcidump utility with no privilege or permission restriction. This allows an unprivileged process to dump Bluetooth HCI packets to an arbitrary file path...

Microsoft Windows Search Indexer Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Search Indexer is a search index for the Windows Microsoft Windows is a set of operating systems for personal...

Microsoft Windows Search Indexer Privilege Vulnerability (CNVD-2020-07944)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Search Indexer is a search index for the Windows Microsoft Windows is a set of operating systems for personal...

Microsoft Windows Search Indexer Privilege Vulnerability (CNVD-2020-07945)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Search Indexer is a search index for the Windows Microsoft Windows is a set of operating systems for personal...

Microsoft Windows Media Service Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege exploit exists in Microsoft Windows Media Service. An attacker can exploit thi...