The vulnerability of the MIT Kerberos Samba AD DC network communication software component allows attackers to enhance their privileges.

The vulnerability of the MIT Kerberos Samba AD DC network communication component programs is related to the ability to support RODC functionality. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the SolarWinds Orion Platform’s network monitoring software lies in the lack of security measures for SQL query structures, allowing attackers to elevate their privileges to administrator levels.

The vulnerability of the SolarWinds Orion Platform’s network monitoring software lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to elevate their privileges to an administrative level remotely...

The vulnerability of the Active Directory Domain Services component for the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely.

The vulnerability of the Active Directory Domain Services component for the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the RoboHelp software in publishing content related to manuals, policies, and knowledge bases, due to the uncontrolled element of the search path. This vulnerability allows attackers to exploit their privileges.

The vulnerability of the RoboHelp software for publishing content such as help documents, policies, and knowledge bases is related to an uncontrollable element of the search process. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Active Directory Domain Services component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the VMware InstallBuilder development and automatic installer tool for Windows operating systems arises from the use of insufficiently random values. This allows a malicious individual to exploit their privileges.

The vulnerability of the VMware InstallBuilder tool for developing and automating installer installations on Windows operating systems is related to the use of insufficiently random values. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...

The vulnerability in the web interface of the administrator’s VPN server for corporate networks, Pulse Connect Secure, allows a hacker to increase their privileges.

The vulnerability in the web interface of VPN gateways for corporate networks, Pulse Connect Secure, involves unlimited downloading of malicious files. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the debug_post_set.cgi component in the D-Link DWR-932C E1 router microprogramming system allows a hacker to increase their privileges.

The vulnerability of the debugpostset.cgi component in the D-Link DWR-932C E1 router microprogramming system is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending a specially crafted HTTP request...

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an insecure process for searching DLL libraries. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor relates to a non-safe method of searching for DLL libraries. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the microprogrammed logic controller ioLogik’s software, related to hard-coding passwords, allows a intruder to escalate their privileges and execute arbitrary code.

The vulnerability of the microprogrammed logic controller ioLogik software relates to the rigid encoding of passwords. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code remotely...

The vulnerability of the Active Directory service for Windows operating systems arises from the insecure management of privileges, allowing attackers to elevate their privileges within the system.

The vulnerability of the Active Directory service for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to escalate privileges within the system remotely...

The vulnerability of the Elastic App Search application discovery tool, related to incorrect permission configuration, allows a violator to increase their privileges.

The vulnerability of the Elastic App Search application discovery tool is related to the improper assignment of permissions for API keys. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2021-5301 · Microsoft · Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access control in Active Directory Domain Services, which can be exploited by a remote attacker to elevate their privileges...

[SECURITY] [DLA 2791-1] mailman security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2791-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 23, 2021 https://wiki.debian.org/LTS -...

Debian DSA-4991-1 : mailman - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-4991 advisory. - /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CVE-2020-12108 - GNU Mailman before 2.1.33 allows arbitrary content injection...

The vulnerability of the software for accessing the VPN service vpn-user-portal arises due to insufficient validation of input data. This allows a hacker to increase their privileges.

The vulnerability of the software for accessing the VPN service vpn-user-portal exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2021-42097

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrftoken value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin e.g., for account takeover...

CVE-2021-42096

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrftoken value is derived from the admin password, and may be useful in conducting a brute-force attack against that password...

The vulnerability of the HBS 3 (Hybrid Backup Sync) backup and disaster recovery application for QTS operating systems, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the HBS 3 Hybrid Backup Sync backup and disaster recovery application for QTS operating systems is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

GNU Mailman 安全漏洞

GNU Mailman is a free suite of software from the GNU community for managing e-mail discussions and e-mail lists. The software integrates with Web projects to make it easy for users to manage email subscription accounts and provides built-in archiving, automatic forwarding processing, content...