The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server lies in their lack of access control mechanisms, which allows attackers to increase their privileges.

The vulnerabilities of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to increase their privileges remotely...

Microsoft Windows IIS Server CVE-2019-1365 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. Successful exploits will allow an attacker to execute arbitrary code on the target system. Failed attacks may cause denial of service conditions. Technologies Affected Microsoft Windows 10 Version 1607 for 32-b...

Microsoft SharePoint CVE-2019-1330 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Foundati...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

Integer overflow

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9278

In libexif, there is a possible out of bounds write due to an integer overflow. This could lead to remote escalation of privilege in the media content provider with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android...

CVE-2019-9459

In libttspico, there is a possible OOB write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-79593569...

The vulnerability of the PDF Viewer component in Firefox ESR and Firefox browsers allows attackers to escalate their privileges.

The vulnerability of the CaptureHandler component in Firefox ESR and Firefox exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation

Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation Author: LiquidWorm Discovery Date: 2019-09-26 Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Tested on: GoAhead-Webs Advisory ID: ZSL-2019-5538 Advisory URL:...

V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation Vulnerability

Exploit for hardware platform in category web applications Exploit Title: V-SOL GPON/EPON OLT Platform 2.03 - Remote Privilege Escalation Author: LiquidWorm Vendor: Guangzhou V-SOLUTION Electronic Technology Co., Ltd. Product web page: https://www.vsolcn.com Tested on: GoAhead-Webs Advisory ID:...

The vulnerability of the microprogrammed Ethernet switch software from Moxa, models PT-7528 and PT-7828, stems from the use of a rigidly encrypted cryptographic key for encrypting account data. This allows attackers to enhance their privileges.

The vulnerability of the microprogrammed Ethernet switch software of Moxa PT-7528 and Moxa PT-7828 lies in the use of a rigidly encrypted cryptographic key, which is used for encrypting account data. Exploiting this vulnerability allows a remote attacker to enhance their privileges...

VMSA-2019-0015:VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability

VMware Security Advisories Advisory ID| VMSA-2019-0015 ---|--- Advisory Severity| Critical CVSSv3 Range| 9.8 Synopsis| VMware Cloud Foundation and VMware Harbor Container Registry for PCF address remote escalation of privilege vulnerability CVE-2019-16097 Issue Date| 2019-09-24 Updated On|...

Microsoft ASP.NET Core CVE-2019-1302 Remote Privilege Escalation Vulnerability

Description Microsoft ASP.NET Core is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft ASP.NET Core 2.1 Microsoft ASP.NET Core 2.2 Microsoft ASP.NET Core 3.0 Recommendations Block external access ...

The vulnerability of the security suite for cloud services and Palo Alto Networks’ Twistlock platform allows attackers to escalate their privileges.

The vulnerability of the cloud service protection system and Palo Alto Networks’ Twistlock platform is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges remotely...

The vulnerabilities of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 allow attackers to enhance their privileges.

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 is related to the use of strictly encrypted passwords for user roles such as root, debug-admin, cisco, admin, and guest. Exploiting this vulnerability allow...

The vulnerability of the Microsoft Outlook email client, related to errors in processing incoming messages, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Outlook email client is related to errors in processing incoming messages. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the mwifiex_update_bss_desc_with_ie function in Linux kernel allows a hacker to escalate their privileges, cause service failures, or execute arbitrary code.

The vulnerability of the mwifiexupdatebssdescwithie function in the Linux kernel’s marvell/mwifiex/scan.c file arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges, cause service failures, or...

The vulnerability of the virtlockd-admin.socket and virtlogd-admin.socket modules of the Libvirt management library allows attackers to increase their privileges.

The vulnerability of the virtlockd-admin.socket and virtlogd-admin.socket modules of the Libvirt management library is related to the absence of the SocketMode parameter. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the McAfee Enterprise Security Manager system, which exists due to an incorrect restriction on the path to the restricted catalog, allows attackers to increase their privileges.

The vulnerability of the McAfee Enterprise Security Manager critical threat detection system exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...