1976 matches found
PT-2023-2992 · Satrlt.Os · Satrlt.Os
Name of the Vulnerable Software and Affected Versions: SatRLT.OS versions affected versions not specified Description: The issue is related to unprotected transmission of authentication data in the SatRLT.OS software for "Сателлит-А" programmable logic controllers. This could allow a remote...
CVE-2023-26860
SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontController::displayAjaxGenerateBudget component...
The vulnerability of the P5E GNSS satellite receiver’s microprogramming software, related to errors during authentication procedures, allows a violator to increase their privileges.
The vulnerability of the P5E GNSS satellite receiver’s microprogramming software is related to errors during the authentication process. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
CVE-2023-0959
Bhima version 1.27.0 allows a remote attacker to update the privileges of any account registered in the application via a malicious link sent to an administrator. This is possible because the application is vulnerable to CSRF...
DEBIAN-CVE-2021-28235
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...
UBUNTU-CVE-2021-28235
Authentication vulnerability found in Etcd-io v.3.4.10 allows remote attackers to escalate privileges via the debug function...
The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows attackers to escalate their privileges.
The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...
PT-2023-2238
Name of the Vulnerable Software and Affected Versions Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.1 and 9.3.0.2, including 8.3.x Description The issue is related to the use of non-canonical URL paths for authorization solutions, which can be circumvented. This can allo...
CVE-2023-26858
SQL injection vulnerability found in PrestaSHp faqs v.3.1.6 allows a remote attacker to escalate privileges via the faqsBudgetModuleFrontController::displayAjaxGenerateBudget component...
The vulnerability of FortiWeb web applications’ network firewalls, related to writing data beyond the buffer in memory, allows attackers to escalate their privileges.
The vulnerability of FortiWeb web applications’ network firewalls is related to the writing of data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by sending specially crafted HTTP requests remotely...
PT-2023-15392 · Redgate · Redgate Sql Monitor
Name of the Vulnerable Software and Affected Versions: Red Gate SQL Monitor versions 11.0.14 through 12.1.46 Description: The issue is related to Incorrect Access Control, which can be exploited remotely for Escalation of Privileges. Recommendations: For versions 11.0.14 through 12.1.46, update t...
CVE-2022-42425
This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of requests to modify poller broker configuration. The issue results from the lack of...
CVE-2023-27847
SQL injection vulnerability found in PrestaShop xipblog v.2.0.1 and before allow a remote attacker to gain privileges via the xipcategoryclass and xippostsclass components...
CVE-2023-26864
SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges via the SmplTools::getMatchingRedirectionsFromPartscomponent...
CVE-2022-20532
In parseTrackFragmentRun of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
The vulnerability of the microprogramming software of Zyxel LTE3202-M437 and LTE3316-M604 allows attackers to enhance their privileges and gain access to the device.
The vulnerability of Zyxel LTE3202-M437 and LTE3316-M604 router microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and gain access to the device via the TELNET network protocol...
CVE-2022-20532
In parseTrackFragmentRun of MPEG4Extractor.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
The vulnerability of the client request handler of the security access control system, IED Siemens RUGGEDCOM CROSSBOW, allows a perpetrator to enhance their privileges.
The vulnerability of the client request handler of the Siemens RUGGEDCOM CROSSBOW access control system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to enhance their privileges by adding user accounts to administrative groups...
HPESBNW04460 rev.3 - HPE Aruba CX Switches, Remote Escalation of Privilege
Potential Security Impact: Remote: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba CX 10000 Switch Series - AOS-CX 10.10.xxxx: 10.10.1020 and below, AOS-CX 10.09.xxxx: 10.09.1020 and below, AOS-CX 10.08.xxxx: 10.08.1070 and below, AOS-CX 10.06.xxxx:...