The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the event forwarding mechanism in IBM QRadar WinCollect Agent is related to deficiencies in access control. Exploiting this vulnerability can allow attackers operating remotely to enhance their privileges...

CVE-2023-39069

An issue in StrangeBee TheHive v.5.0.8, v.4.1.21 and Cortex v.3.1.6 allows a remote attacker to gain privileges via Active Directory authentication mechanism...

PT-2023-6624 · Sap · Sap Commoncryptolib

Name of the Vulnerable Software and Affected Versions: SAP CommonCryptoLib affected versions not specified Description: The issue is related to insufficient authorization checks in the SAP CommonCryptoLib library. This can lead to an escalation of privileges, allowing a remote attacker to read,...

The vulnerability of the PAMcheckPasswd() function, a utility for managing and monitoring processes, programs, files, and Monit directories, allows a perpetrator to increase their privileges.

The vulnerability of the PAMcheckPasswd function, a utility for managing and monitoring processes, programs, files, and Monit directories, is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

Oracle Linux 8 : mailman:2.1 (ELSA-2021-4826)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2021-4826 advisory. - Fix for CVE-2021-42096 - Fix for CVE-2021-42097 Tenable has extracted the preceding description block directly from the Oracle Linux security advisor...

The vulnerability of the Zoom video conferencing service, which exists due to the lack of measures to neutralize special elements, allows a violator to increase their privileges.

The vulnerability of the Zoom video conferencing service exists due to the lack of measures taken to neutralize certain elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...

The vulnerability in the software platform’s web service for managing security in industrial networks, MXSecurity, allows a perpetrator to increase their privileges.

The vulnerability of the software platform’s web service for managing security in industrial networks, MXSecurity, is related to insufficient entropy when assigning possible random values. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Zoom Desktop software for Windows, a video conferencing application, stems from incorrect path restrictions for the access-controlled directory. This allows attackers to escalate their privileges.

The vulnerability of the Zoom Desktop video conferencing software for Windows clients is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

PT-2023-5907

Name of the Vulnerable Software and Affected Versions Gevent versions prior to 23.9.1 Gevent version 23.9.0 Description The issue in Gevent is related to insufficient validation of executed requests in the WSGIServer component, allowing a remote attacker to escalate privileges via a crafted scrip...

The vulnerability of the Zoom Desktop for Windows video conferencing software in relation to insufficient data authentication checks allows attackers to exploit their privileges.

The vulnerability of the Zoom Desktop for Windows video conferencing software-related software lies in insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the McAfee Safe Connect VPN service lies in its uncontrolled search path, which allows attackers to escalate their privileges.

The vulnerability of the McAfee Safe Connect VPN service is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the CSI Proxy component of the Kubernetes cluster management software allows a hacker to increase their privileges.

The vulnerability of the CSI Proxy component, a software tool for managing virtual machine clusters in Kubernetes, is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the administration console of a cross-platform real-time collaboration server like Openfire, related to the possibility of bypassing the path, allows attackers to increase their privileges.

The vulnerability of the administration console of a cross-platform real-time collaboration server like Openfire is related to the possibility of bypassing the authentication process. Exploiting this vulnerability allows an attacker who operates remotely to enhance their privileges...

The vulnerability of the web server of the application software interface for Moxa TN-5900 routers allows a hacker to increase their privileges.

The vulnerability of the web server of the application software interface for Moxa TN-5900 routers is related to errors during the authentication process. Exploiting this vulnerability can allow attackers to increase their privileges remotely...

The vulnerability of software for developing and optimizing Intel AI systems is related to an uncontrolled element in the search process, allowing attackers to enhance their privileges.

The vulnerabilities of the software used in the development and optimization of Intel AI systems are related to an uncontrollable element in the search process. Exploiting these vulnerabilities can allow attackers, who operate remotely, to enhance their privileges...

The vulnerability of the Bluetooth A2DP driver for the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Bluetooth A2DP driver for the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

PT-2023-4454 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge, allowing a remote attacker to elevate their privileges. Recommendations: At the moment, there is...

CVE-2023-21242

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-21242

In isServerCertChainValid of InsecureEapNetworkHandler.java, there is a possible way to trust an imposter server due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-20965

In processMessageImpl of ClientModeImpl.java, there is a possible credential disclosure in the TOFU flow due to a logic error in the code. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...