CVE-2020-23448

This CVE concerns the NewBee-Mall application where all versions are affected by an incorrect access control flaw in AdminLoginInterceptor.java that allows bypassing authentication for the /admin area, enabling privilege escalation. The root cause is the bypass of the system’s authentication logi...

CVE-2020-23448

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed...

newbee-mall 访问控制错误漏洞

newbee-mall is an e-commerce system. An access control error vulnerability exists in all versions of newbee-mall, where an attacker cannot remotely gain privileges via NewBeeMallIndexConfigServiceImpl. java, but can make unauthorized changes to any user information via userID...

EulerOS 2.0 SP3 : libexif (EulerOS-SA-2021-1083)

According to the versions of the libexif package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media...

The vulnerability of the destructor function in the WindowsDllDetourPatcher class in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to escalate their privileges.

The vulnerability of the WindowsDllDetourPatcher function in browsers like Firefox, Firefox ESR, and the email client Thunderbird is related to insufficient input validation. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of D-Link DSL-2640B router software lies in the use of pre-installed credentials, which allows attackers to increase their privileges.

The vulnerability of D-Link DSL-2640B router software is related to the use of pre-installed credentials. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

PT-2021-1677 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management within the Windows Update Stack component of Windows operating systems. This can allow a remote attacker to elevate their privileges...

CVE-2020-0471

In reassembleanddispatch of packetfragmenter.cc, there is a possible way to inject packets into an encrypted Bluetooth connection due to improper input validation. This could lead to remote escalation of privilege between two Bluetooth devices by a proximal attacker, with no additional execution...

CVE-2020-25848

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism...

CVE-2020-25848 HGiga MailSherlock - Broken Authentication

HGiga MailSherlock contains weak authentication flaw that attackers grant privilege remotely with default password generation mechanism...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation software lies in the insecure management of privileges, which allows attackers to escalate their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Foundation packages is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Egavilanmedia User Registration & Login System Cross-Site Request Forgery Vulnerability

Egavilanmedia User Registration & Login System is a management platform for user registration and login from Egavilanmedia, USA. A cross-site request forgery vulnerability exists in EgavilanMedia User Registration & Login System with Admin Panel 1.0, which allows to remotely obtain privileges to ...

CVE-2020-24678

An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by multiple vulnerabilities such as the possibility to allow remote authenticated users to gain high privileges...

The vulnerability of the SAP ERP HCM workforce management software lies in the lack of authentication, which allows attackers to elevate their privileges.

The vulnerability of the SAP ERP HCM workforce management software is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2020-35273

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

The vulnerability of the Networking component in the Google Chrome web browser, which allows a hacker to increase their privileges

The vulnerability of the Networking component in the Google Chrome web browser is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Open WebRTC Toolkit, a software development tool, arises from the implementation of incorrect control flow management, allowing attackers to enhance their privileges.

The vulnerability of the Open WebRTC Toolkit development tool is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool, related to insufficient flow management, allows a hacker to gain increased privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient control over traffic. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the asynchronous Moxa NPort 5100A server, related to security mechanisms’ deficiencies, allows attackers to escalate their privileges.

The vulnerability of the asynchronous Moxa NPort 5100A server is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to enhance their privileges

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...