Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2019-14442)

Microsoft Office is an office software suite developed by Microsoft Corporation.Microsoft SharePoint Enterprise Server is an enterprise business collaboration platform. A remote elevation of privilege vulnerability exists in Microsoft SharePoint Server due to the program failing to properly filte...

SAP ABAP Remote Elevation of Privilege Vulnerability

SAP ABAP is an application server that runs on NetWeaver, the application platform that provides the development and runtime environment for SAP applications, and is based on the ABAP high-level programming language and the Java programming language. A remote elevation of privilege vulnerability...

Microsoft Exchange Server CVE-2018-8581 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2010 Microsoft Exchange Server 2013 Microsoft Exchange Server 2016 Microsoft Exchange Server...

ALPINE-CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...

CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...

DEBIAN-CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...

CVE-2016-2123

CVE-2016-2123 affects Samba versions 4.0.0–4.5.2, where the routine ndr_pull_dnsp_name contains an integer wrap/overflow flaw in parsing data from the Samba AD ldb database. An attacker who can write to the dnsRecord attribute over LDAP (default: authenticated LDAP users can do so for new DNS obj...

CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...

CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...

CVE-2016-2123

A flaw was found in samba versions 4.0.0 to 4.5.2. The Samba routine ndrpulldnspname contains an integer wrap problem, leading to an attacker-controlled memory overwrite. ndrpulldnspname parses data from the Samba Active Directory ldb database. Any user who can write to the dnsRecord attribute ov...

The vulnerability of the Windows operating system, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the Windows operating system is related to deficiencies in access control within isolated environments. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of the avrc_pars_browsing_cmd function in the Bluetooth component of the Android operating system allows a hacker to escalate their privileges.

The vulnerability of the avrcparsbrowsingcmd function in the Bluetooth component of the Android operating system is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to gain increased privileges...

The vulnerability of the SetupWizard application for Android operating systems allows a hacker to escalate their privileges.

The vulnerability of the SetupWizard application for the Android operating system is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Microsoft Exchange Server CVE-2018-8448 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2013 Cumulative Update 21 Microsoft Exchange Server 2016 Cumulative Update 10 Recommendation...

Microsoft SharePoint Server CVE-2018-8480 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Microsoft SharePoint Server CVE-2018-8488 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

Microsoft SharePoint Server CVE-2018-8498 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability because it fails to properly sanitize user-supplied input. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsof...

The vulnerability of the CollectValuesOrEntriesImpl function in the Android operating system’s Framework component, which allows a hacker to escalate their privileges

The vulnerability of the CollectValuesOrEntriesImpl function in the Framework component of the Android operating system is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to increase their privileges using a special...

The vulnerability of the EAFS_BCA_BUSOPR_SEPA function in the SAP Enterprise Financial Services software platform, which allows a perpetrator to enhance their privileges.

The vulnerability of the EAFSBCABUSOPRSEPA function in the SAP Enterprise Financial Services software platform is related to authentication process errors. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the EAFS_BCA_BUSOPR_2 function in the SAP Enterprise Financial Services software platform, which allows attackers to enhance their privileges.

The vulnerability of the EAFSBCABUSOPR2 function in the SAP Enterprise Financial Services software platform is related to errors in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...