MediaTek Chipsets 缓冲区错误漏洞

MediaTek Chipsets is a series of chips from China's MediaTek MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation and could lead to remote elevation of privilege...

The vulnerability of the dockerd software for managing SAN networks with Brocade SANnav allows a hacker to increase their privileges.

The vulnerability of the dockerd software for managing SAN networks in Brocade SANnav systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the PAN-OS operating system lies in its inability to neutralize special elements used in the operating system’s commands. This allows attackers to circumvent security restrictions, enhance their privileges, and execute arbitrary commands.

The vulnerability of the PAN-OS operating system is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, enhance their privileges, and execute arbitrary...

The vulnerability of the runas function in the microprogramming software of the digital analysis system MEAC300 allows a hacker to elevate their privileges to the level of an administrator.

The vulnerability of the runas function in the MEAC300 digital analysis system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to elevate their privileges to the level of an administrator...

CVE-2025-25958

Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script...

CVE-2025-25960

Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator...

The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server lies in insufficient validation of requests on the server side, allowing attackers to increase their privileges.

The vulnerability of the Microsoft Dynamics 365 Sales resource planning software server relates to insufficient validation of requests on the server side. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

CVE-2025-25960

CVE-2025-25960 is a Cross Site Scripting vulnerability affecting phpcmsv9 v9.6.3. The issue allows a remote attacker to escalate privileges via the member center’s menu interface in the background administrator. Reported impact is a partial privilege escalation with low confidentiality/integrity ...

The vulnerability of the OAuth2 Token Handler component of the Red Hat Ansible Automation Platform allows a perpetrator to escalate their privileges.

The vulnerability of the OAuth2 Token Handler component of the Red Hat Ansible Automation Platform is related to access control errors. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of FortiOS operating systems, related to incorrect privilege assignment, allows attackers to elevate their privileges.

The vulnerability of FortiOS operating systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the distributed database management system Apache Cassandra lies in its insecure handling of privileges, allowing attackers to elevate their own privileges.

The vulnerability of the distributed database management system Apache Cassandra lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Orbe ONetView Roteador Onet-1200 安全漏洞

Orbe ONetView Roteador Onet-1200 is a router from Orbe Brazil. A security vulnerability exists in the Orbe ONetView Roteador Onet-1200 that originates from a remote attacker being able to elevate privileges from status code 500 to status code 200 via a server response...

MaysWind ezBookkeeping has Improper Privilege Management

An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in the insufficient protection of sensitive data. This allows attackers to exploit their privileges.

The vulnerabilities of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to insufficient protection of sensitive data. Exploiting these vulnerabilities can allow attackers to enhance their privileges remote...

The vulnerability of the Xsan component of the Mac OS system allows attackers to gain increased privileges.

The vulnerability of the Xsan component in the Mac OS operating system is related to a potential integer overflow. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

PT-2025-6753 · Mayswind · Mayswind Ezbookkeeping

Name of the Vulnerable Software and Affected Versions: MaysWind ezBookkeeping version 0.7.0 Description: An issue in MaysWind ezBookkeeping allows a remote attacker to escalate privileges via the token component. Recommendations: For MaysWind ezBookkeeping version 0.7.0, consider disabling the...

The vulnerability of SAP Document Builder in creating and managing documents, related to deficiencies in the authorization process, allows attackers to escalate their privileges.

The vulnerability of SAP Document Builder, a tool for creating and managing documents, is related to deficiencies in its authentication procedures. Exploiting this vulnerability could allow attackers to gain increased privileges remotely...

The vulnerability of PackageKit for macOS operating systems, which allows a hacker to increase their privileges

The vulnerability of PackageKit for macOS operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2025-5805

Name of the Vulnerable Software and Affected Versions Defense Platform Home Edition versions 3.9.51.x and earlier Description A buffer overflow issue exists, allowing a remote attacker to potentially gain SYSTEM privileges of the Windows system where the product is installed, by performing a...

CVE-2020-27869

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this vulnerability. The specific flaw exists within the WriteToFile method. The issue results from the...