Kron Single Connect 安全漏洞

Kron Single Connect is a comprehensive Privileged Access Management Pam software suite from Kron Turkey. It is designed to create a flexible, centrally managed and layered defense security architecture against insider threats. A security vulnerability exists in Kron Single Connect, which stems fr...

PT-2022-2001 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to insufficient input validation in the MySQL...

OpenBMCS 2.4 Remote Privilege Escalation Vulnerability

OpenBMCS 2.4 Create Admin / Remote Privilege Escalation Vendor: OPEN BMCS Product web page: https://www.openbmcs.com Affected version: 2.4 Summary: Building Management & Controls System BMCS. No matter what the size of your business, the OpenBMCS software has the ability to expand to hundreds of...

The vulnerability of the Demon 1905 microprogramming system’s MediaTek MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915 microchips allows attackers to enhance their privileges.

The vulnerability of the MediaTek M7603, M7613, M7615, M7622, M7628, M7629, and M7915 microprogrammed software chips lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the microprogrammed Wi-Fi router software R7000P and R8000, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of the microprogrammed Wi-Fi router software R7000P and R8000 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the microprogrammed Wi-Fi router software models R6900P, R7000P, R7900P, R7960P, R8000P, RAX75, and RAX80 lies in the lack of authentication procedures, which allows attackers to escalate their privileges.

The vulnerability of the microprogrammed Wi-Fi router software models R6900P, R7000P, R7900P, R7960P, R8000P, RAX75, and RAX80 is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of MediaTek’s Wi-Fi microprogramming software drivers, including models such as MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915, allows attackers to gain increased privileges.

The vulnerability of Wi-Fi driver microprogramming software microchips from MediaTek, such as MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, and MT7915, lies in the ability to write beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain elevate...

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software, related to deficiencies in authentication procedures, allows attackers to escalate their privileges.

The vulnerability of NETGEAR D7000 Wi-Fi routers’ microprogramming software is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 allows attackers to enhance their privileges.

The vulnerability of Wi-Fi driver microprogramming software microchips from MediaTek, such as MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacke...

The vulnerability of the Wi-Fi driver microprogramming software for MediaTek’s MC7603E, MC7610, MC7612, MC7613, MC7615, MC7620, MC7622, MC7628, MC7629, and MC7915 allows attackers to enhance their privileges.

The vulnerability of Wi-Fi driver microprogramming software microchips from MediaTek, such as MT7603E, MT7610, MT7612, MT7613, MT7615, MT7620, MT7622, MT7628, MT7629, and MT7915, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacke...

PT-2022-1813 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Edge, allowing a remote attacker to elevate privileges in the system. This can enable the execution o...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android that could be exploited by attackers to remotely elevate privileges without additional executive privileges...

CVE-2021-40579

https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges remote...

CVE-2021-40579

https://www.sourcecodester.com/ Online Enrollment Management System in PHP and PayPal Free Source Code 1.0 is affected by: Incorrect Access Control. The impact is: gain privileges remote...

CVE-2021-40579

The CVE-2021-40579 entry concerns the PayPal Free Source Code Online Enrollment Management System in PHP (version 1.0) and related components, affected by Incorrect Access Control. The underlying impact is remote privilege gain through improper privilege validation when obtaining PHP and PayPal F...

PT-2021-5731 · Mediatek +1 · Mt7622 +8

Name of the Vulnerable Software and Affected Versions: MediaTek microchips versions 2.0.2 MT7603E, MT7613, MT7615, MT7622, MT7628, MT7629, MT7915 affected versions not specified Description: The issue is related to a buffer overflow in the memory of MediaTek Wi-Fi driver microcode, which can allo...

The vulnerability of the Juniper Extension Toolkit (JET) component in Juniper Networks’ Junos OS and Junper Networks’ Junos OS Evolved operating systems allows attackers to enhance their privileges within the system.

The vulnerability of the Juniper Extension Toolkit JET in Juniper Networks’ Junos OS and Juniper Networks’ Junos OS Evolved operating systems is related to insecure privilege management. Exploiting this vulnerability can allow an attacker, operating remotely, to enhance their privileges within th...

CVE-2021-0956

In NfcTag::discoverTechnologies activation of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2021-0956

In NfcTag::discoverTechnologies activation of NfcTag.cpp, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote escalation of privilege with no additionalSystem execution privileges needed. User interaction is not needed for exploitation.Product:...

Input validation

In onCreate of CompanionDeviceActivity.java or DeviceChooserActivity.java, there is a possible way for HTML tags to interfere with a consent dialog due to improper input validation. This could lead to remote escalation of privilege, confusing the user into accepting pairing of a malicious Bluetoo...