1976 matches found
The vulnerability of LiteSpeed and OpenLiteSpeed web application server software lies in the use of an insecure search path, which allows attackers to escalate their privileges.
The vulnerability of LiteSpeed and OpenLiteSpeed web application server software lies in the use of an insecure search path. Exploiting this vulnerability can allow a remote attacker to increase their privileges...
PT-2023-1649 · Abb · Symphony Plus -S+ Operations
Name of the Vulnerable Software and Affected Versions: ABB Symphony Plus S+ Operations versions 2.X through 2.1 SP2, 2.2 ABB Symphony Plus S+ Operations versions 3.X through 3.3 SP1, 3.3 SP2 Description: The issue is related to improper authentication in the ABB Symphony Plus S+ Operations...
PT-2023-1644 · Microsoft · Office Onenote
Name of the Vulnerable Software and Affected Versions: Microsoft OneNote affected versions not specified Description: The issue is related to errors in the representation of information by the user interface of Microsoft OneNote. Exploitation of this issue may allow a remote attacker to elevate...
PT-2023-1604 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue is related to insufficient access control in Microsoft SharePoint Server, allowing a remote attacker to elevate their privileges. Recommendations: At the momen...
PT-2023-3787 · NetGear · Netgear Prosafe Network Management System
Name of the Vulnerable Software and Affected Versions: NETGEAR ProSAFE Network Management System affected versions not specified Description: This issue allows remote attackers to escalate privileges on affected installations. Although authentication is required to exploit this, the existing...
CVE-2021-31578
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...
CVE-2021-31573
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...
CVE-2021-31575
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...
CVE-2021-31578
In Boa, there is a possible escalation of privilege due to a stack buffer overflow. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210008; Issue ID:...
Command injection
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...
Command injection
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...
CVE-2021-31574
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...
CVE-2021-31573
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...
CVE-2021-31574
In Config Manager, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege from a proximal attacker with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: A20210009; Issue ID:...
CVE-2021-31574
CVE-2021-31574 is a command-injection vulnerability in the product component named Config Manager caused by improper input validation. It allows remote escalation of privilege from a proximal attacker without requiring additional execution privileges and without user interaction, per the provided...
CVE-2021-37305
An Insecure Permissions issue in jeecg-boot 2.4.5 and earlier allows remote attackers to gain escalated privilege and view sensitive information via api uri: /sys/user/querySysUser?username=admin...
The vulnerability of the iotdb-web-workbench component of the IoT database for Apache IoTDB allows a hacker to escalate their privileges.
The vulnerability of the iotdb-web-workbench component of the IoT database solution from Apache IoTDB is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...
The vulnerability of Microsoft Edge browser arises from the lack of measures taken to protect the structure of web pages, allowing attackers to enhance their privileges.
The vulnerability of Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of the Microsoft Edge browser for Android, related to the lack of protection for service data, allows attackers to escalate their privileges.
The vulnerability of Microsoft Edge browser for Android is related to the lack of protection for service data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...