2128 matches found
MediaTek Modem 缓冲区错误漏洞
MediaTek Modem is a 5G modem technology from MediaTek, a Chinese company. A buffer error vulnerability exists in MediaTek Modem that stems from incorrect boundary checking leading to out-of-bounds writes, which could lead to remote elevation of privilege...
PT-2025-35454
Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: A possible out of bounds write exists due to an incorrect bounds check. This could lead to remote escalation of privilege if a User Equipment UE connects to a rogue base station controlled by...
CVE-2025-52184
Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...
CVE-2025-52184
Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...
CVE-2025-52184
Cross Site Scripting vulnerability in Helpy.io v.2.8.0 allows a remote attacker to escalate privileges via the New Topic Ticket funtion...
CVE-2025-53795
Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...
The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
CVE-2025-53795
Improper authorization in Microsoft PC Manager allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
The vulnerability of the Microsoft SQL Server database management system lies in the lack of measures taken to protect SQL query structures, allowing attackers to enhance their privileges.
The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
The vulnerability of web consoles for creating and managing resources in the Azure Portal is related to shortcomings in the authentication process, which allows attackers to escalate their privileges.
The vulnerability of web consoles for creating and managing resources in the Azure Portal is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers, operating remotely, to increase their privileges...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
CVE-2025-31715
In vowifi service, there is a possible command injection due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed...
CVE-2025-31715
CVE-2025-31715 affects the vowifi service. Root cause: improper input validation enabling a command injection. Impact: remote escalation of privilege with no additional privileges required; confidentiality/ integrity/availability all high. CVSS v3.1 base score 9.8 (Network, Low complexity, Privil...
The vulnerability of the Symantec Endpoint Protection antivirus software lies in synchronization errors when using a shared resource, which allows a hacker to increase their privileges.
The vulnerability of the Symantec Endpoint Protection antivirus software is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
PT-2025-33626 · Google +2 · Android +2
Name of the Vulnerable Software and Affected Versions: vowifi affected versions not specified Description: A command injection issue exists in the vowifi service due to improper input validation. This could lead to remote escalation of privilege without requiring additional execution privileges...
UNISOC Chipsets 安全漏洞
UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from improper input validation and could lead to remote elevation of privilege...
Linux Distros Unpatched Vulnerability : CVE-2016-6211
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a...