CloudBees Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin Access Privilege Vulnerability

CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. company CloudBees. The product is mainly used to monitor continuous software version release/testing projects and some timed tasks.ElasticBox Jenkins Kubernetes CI/CD Plugin is used in...

Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability (CNVD-2019-37414)

Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability exists in Cisco TelePresence Collaboration Endpoint CE versions prior to 9.8.1 due to an improperly implemented privilege. An attacker can exploit the vulnerability to overwrite arbitrary files by logging in and...

Privilege escalation

An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Windows Power Service Elevation of Privilege Vulnerability'...

CVE-2019-1323

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336...

CVE-2019-1316

An elevation of privilege vulnerability exists in Microsoft Windows Setup when it does not properly handle privileges, aka 'Microsoft Windows Setup Elevation of Privilege Vulnerability'...

Description of the security update for SharePoint Server 2019: October 8, 2019

None None...

SilverStripe Elevation of Privilege Vulnerability

SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.3.3 and previous versions of a security vulnerability. An attacker can...

Guojiz Change Password Interface Has Arbitrary User Privilege Vulnerability

Guojiz is a light community system based on layui front-end framework and thinkphp. Guojiz password change interface has any user privilege vulnerability, an attacker can use this vulnerability to modify any user's data table information, so as to enhance their own or other people's privileges...

VMSA-2019-0015:VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0015 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.8 Synopsis| VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability CVE-2019-16097 Issue Date| 2019-09-24 Updated On|...

CVE-2019-1270

An elevation of privilege vulnerability exists in Windows store installer where WindowsApps directory is vulnerable to symbolic link attack, aka 'Microsoft Windows Store Installer Elevation of Privilege Vulnerability'...

CVE-2019-1271

An elevation of privilege exists in hdAudio.sys which may lead to an out of band write, aka 'Windows Media Elevation of Privilege Vulnerability'...

Description of the security update for SharePoint Enterprise Server 2016: September 10, 2019 (KB4475594)

None None...

MongoDB Server Privilege Permission and Access Control Issues Vulnerability

MongoDB Server is the United States MongoDB company's set of open source NoSQL database . The database provides collection-oriented storage , dynamic query , data replication and automatic failover and other functions . MongoDB Server is vulnerable to a privilege license and access control issue...

GitLab Omnibus Privilege Vulnerability

Omnibus GitLab is a package of different services and tools needed to run GitLab from GitLab USA. GitLab Omnibus An elevation of privilege vulnerability exists in GitLab versions 7.4 through 12.2.1, which can be exploited by an attacker to elevate privileges...

Google Android Framework elevation of privilege vulnerability (CNVD-2019-38878)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA, of which Framework is a component of the Android framework. There is an elevation of privilege vulnerability in Framework in Android. An attacker can exploit this vulnerability to elevate...

Lenovo Solution Center Privilege Vulnerability

Lenovo Solution Center LSC is a suite of software from the Chinese company Lenovo that helps users quickly identify the state of system health, network connectivity and overall system security. An elevation of privilege vulnerability exists in Lenovo Solution Center version 03.12.003, which can b...

CVE-2019-1583

CVE-2019-1583 affects Palo Alto Networks Twistlock console (version 19.07.358 and earlier). The Red Hat, CNVD, CVE lists and Palo Alto advisories describe an escalation of privileges wherein a Twistlock user with Operator capabilities can elevate to another user after interacting with an affected...

Google Android System elevation of privilege vulnerability (CNVD-2019-39722)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. There is a security vulnerability in Platform in Android version 10. The vulnerability can be exploited by an attacker to elevate privileges...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29423)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...

IBM Informix Dynamic Server Privilege License and Access Control Issues Vulnerability (CNVD-2019-29426)

IBM Informix Dynamic Server IDS is a scalable object-relational database server from IBM in the United States that provides continuous data availability and disaster recovery, among other features, for clustered data centers. IBM Informix Dynamic Server suffers from a Privilege Permission and...