4264 matches found
Google Android elevation of privilege vulnerability (CNVD-2022-22952)
Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android versions prior to 10, 11, and 12. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this...
PT-2022-1866 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the insecure management of privileges in the Advanced Local Procedure Call ALPC handler of the Microsoft Windows operating system. This can allow an attacker to...
PT-2022-1836 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Advanced Local Procedure Call ALPC handler of Windows operating systems. This can allow an attacker to...
Microsoft Windows ALPC 权限许可和访问控制问题漏洞
Microsoft Windows ALPC is a C/S model technology developed by Microsoft to replace LPC for native RPC. Microsoft Windows ALPC has an elevation of privilege vulnerability that can be exploited to gain elevated privileges on the system...
Microsoft Windows 竞争条件问题漏洞
Microsoft Windows ALPC is a C/S model technology developed by Microsoft to replace LPC for native RPC. Microsoft Windows ALPC has an elevation of privilege vulnerability that can be exploited by attackers to execute arbitrary code with elevated privileges...
Google Android 竞争条件问题漏洞
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this vulnerability to cause a local...
Google Android 数据伪造问题漏洞
Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android versions prior to 12. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this vulnerability to...
Google Android 权限许可和访问控制问题漏洞
Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android versions prior to 10, 11, and 12. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An attacker could use this...
ALPINE-CVE-2021-3738
In DCE/RPC it is possible to share the handles cookies for resource state between multiple connections via a mechanism called 'association groups'. These handles can reference connections to our sam.ldb database. However while the database was correctly shared, the user credentials state was only...
AZL-37002 CVE-2021-23192 affecting package samba for versions less than 4.18.3-1
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...
CVE-2021-23192
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...
AZL-8903 CVE-2021-23192 affecting package samba 4.12.5-7
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...
ALPINE-CVE-2021-23192
A flaw was found in the way samba implemented DCE/RPC. If a client to a Samba server sent a very large DCE/RPC request, and chose to fragment it, an attacker could replace later fragments with their own data, bypassing the signature requirements...
CVE-2021-44166
An improper access control vulnerability CWE-284 in FortiToken Mobile Android external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the...
CVE-2021-44166
Summary: CVE-2021-44166 affects Fortinet FortiToken Mobile for Android (external push notification, versions ≤ 5.1.0). The root cause is an improper access control (CWE-284) that could allow a remote attacker who already has a user’s password to access the protected system during the 2FA flow, ev...
CVE-2021-44166
An improper access control vulnerability CWE-284 in FortiToken Mobile Android external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the...
CVE-2021-44166: Undefined Security Weakness
An improper access control vulnerability CWE-284 in FortiToken Mobile Android external push notification 5.1.0 and below may allow a remote attacker having already obtained a user's password to access the protected system during the 2FA procedure, even though the deny button is clicked by the...
JetBrains YouTrack Elevation of Privilege Vulnerability (CNVD-2022-20141)
JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features error tracking, creating workflows and monitoring project progress.An elevation of privilege vulnerability exists in versions prior to JetBrains YouTrack...