PT-2025-1114

Name of the Vulnerable Software and Affected Versions Active Directory Domain Services affected versions not specified Description A critical elevation-of-privilege vulnerability in Active Directory Domain Services allows attackers to gain SYSTEM-level access. The vulnerability is related to erro...

CVE-2024-12587 Contact Form Master <= 1.0.7 - Reflected XSS

The Contact Form Master WordPress plugin through 1.0.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

CVE-2024-2201

A cross-privilege Spectre v2 vulnerability allows attackers to bypass all deployed mitigations, including the recent FineIBT, and to leak arbitrary Linux kernel memory on Intel systems...

CVE-2024-49147 Microsoft Update Catalog Elevation of Privilege Vulnerability

...

CVE-2024-49109

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49111

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49097

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability...

CVE-2024-49094

Wireless Wide Area Network Service WwanSvc Elevation of Privilege Vulnerability...

CVE-2024-49083

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability...

CVE-2024-49073

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability...

CVE-2024-53292

Dell VxVerify, versions prior to x.40.405, contain a Plain-text Password Storage Vulnerability in the shell wrapper. A local high privileged attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed...

CVE-2024-49110 Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

...

CVE-2024-49109 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

...

CVE-2024-49109 Wireless Wide Area Network Service (WwanSvc) Elevation of Privilege Vulnerability

...

CVE-2024-49083

CVE-2024-49083 is a Windows Mobile Broadband Driver elevation-of-privilege vulnerability. The initial data identifies an attacker-controlled escalation with a CVSS v3.1 base score of 6.8 (Privileges Required: None, User Interaction: None, Attack Vector: Physical, Impact: High on confidentiality, ...

CVE-2024-43594 Microsoft System Center Elevation of Privilege Vulnerability

...

Windows Mobile Broadband Driver Elevation of Privilege Vulnerability

...

Description of the security update for Office 2016: December 10, 2024 (KB5002661)

None None...

KB5048667: Windows 11 Version 24H2 / Windows Server 2025 Security Update (December 2024)

The remote Windows host is missing security update 5048667 or hotpatch 5048794. It is, therefore, affected by multiple vulnerabilities - Input Method Editor IME Remote Code Execution Vulnerability CVE-2024-49079 - Windows Common Log File System Driver Elevation of Privilege Vulnerability...

Nav2 安全漏洞

Nav2 is the ROS community's navigation framework and system for ROS2. A security vulnerability exists in Nav2, which stems from the inclusion of an unsafe privilege vulnerability. An attacker exploiting this vulnerability could execute arbitrary code in nav2amcl by writing a script...