Windows Subsystem for Linux Elevation of Privilege Vulnerability

...

Win32k Elevation of Privilege Vulnerability

...

Security Updates for Microsoft Visual Studio Products (January 2024)

The Microsoft Visual Studio Products are missing security updates. They are, therefore, affected by multiple vulnerabilities, including: - Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability CVE-2023-29356, CVE-2023-32025, CVE-2023-32026, CVE-2023-32027 - NET, .NET Framework,...

CVE-2023-6485 Html5 Video Player < 2.5.19 - Subscriber+ Stored XSS

The Html5 Video Player WordPress plugin before 2.5.19 does not sanitise and escape some of its player settings, which combined with missing capability checks around the plugin could allow any authenticated users, such as low as subscribers to perform Stored Cross-Site Scripting attacks against hi...

CVE-2023-23427

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

CVE-2023-23430

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

Win32k Elevation of Privilege Vulnerability

...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

...

CVE-2023-32460

Dell PowerEdge BIOS contains an improper privilege management security vulnerability. An unauthenticated local attacker could potentially exploit this vulnerability, leading to privilege escalation...

Oracle Linux 8 : dotnet7.0 (ELSA-2023-7256)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7256 advisory. 7.0.114-1.0.1 - Update to .NET SDK 7.0.114 and Runtime 7.0.14 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2023-36407

Windows Hyper-V Elevation of Privilege Vulnerability...

CVE-2023-36033

Windows DWM Core Library Elevation of Privilege Vulnerability...

November 14, 2023-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 (KB5032185)

November 14, 2023-Security Only Update for .NET Framework 3.5.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8 for Windows Embedded 7 Standard and Windows Server 2008 R2 SP1 KB5032185 Revised 11/15/23: to remove CVE details which were not affected by the .NET Framework November Security and Quality rollup. Appli...

Windows Search Service Elevation of Privilege Vulnerability

...

November 14, 2023-KB5032478 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Azure Stack HCI, version 22H2

None None...

CVE-2023-36024 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Google Android elevation of privilege vulnerability (CNVD-2023-96683)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a lack of privilege checks in the privilege manager, which can be exploited by an attacker to cause an elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2023-96685)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a lack of privilege checking in the kernel, which can be exploited by an attacker to cause an elevation of privilege...

Google Android elevation of privilege vulnerability (CNVD-2023-96687)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that stems from a lack of privilege checking, which can be exploited by an attacker to cause an elevation of privilege...

SUSE CVE-2020-14702

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Security: Privileges. Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server...