PT-2024-4666 · Microsoft · Azure Arc-Enabled Kubernetes Extension Cluster

Name of the Vulnerable Software and Affected Versions: Azure Arc-enabled Kubernetes Extension Cluster affected versions not specified Description: The issue is related to insufficient access controls in Azure Arc-enabled Kubernetes extensions, which can be exploited by a remote attacker to elevat...

PT-2024-2831 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to insufficient access control in Microsoft Defender for IoT, which could allow a remote attacker to elevate their privileges. Recommendations: At th...

PT-2024-3200 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to inadequate access control in Microsoft Defender for IoT, which can be exploited by a remote attacker to elevate their privileges. Recommendations:...

PT-2024-3201 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to inadequate access control in Microsoft Defender for IoT, which can be exploited by a remote attacker to elevate their privileges. Recommendations:...

PT-2024-23558 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: The issue allows a malicious user to escalate privileges by injecting malicious ROS2 nodes into the system remotely. Recommendations: For ROS2 Iron Irwini version 2, at the moment, there is no...

The vulnerability of the Grafana monitoring and surveillance platform, related to bypassing authentication through spearphishing, allows attackers to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability of the Grafana monitoring and observation platform is related to the escalation of privileges from the administrator to another administrator when using a authentication proxy server. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

CVE-2024-20040

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 for MT6XXX chipsets / WCNCR00363530...

CVE-2024-20040

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 for MT6XXX chipsets / WCNCR00363530...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to the disclosure of information through registration files, allows attackers to enhance their privileges.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the web interface of the operating system PAN-OS in the centralized network switch management system of Palo Alto Networks Panorama allows a hacker to enhance their privileges.

The vulnerability of the PAN-OS operating system’s web interface in the Palo Alto Networks Panorama network switch management system is related to insecure privilege management. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Ubuntu 16.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6700-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6700-2 advisory. It was discovered that the Layer 2 Tunneling Protocol L2TP implementation in the Linux kernel contained a race condition when releasing PPPoL2TP sockets ...

PT-2024-4469 · Opentext · Opentext Content Manager

Name of the Vulnerable Software and Affected Versions: OpenText Content Manager affected versions not specified Description: The issue is related to insecure privilege management in OpenText Content Manager. It allows a remote attacker to elevate privileges or perform arbitrary actions...

The vulnerability of Microsoft Visual Studio Code’s editor, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of Microsoft Visual Studio Code’s editor is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

PT-2024-2149 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access restrictions in the editor, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there ...

The vulnerability of the software for managing OpenEdge Authentication Gateway lies in its ability to bypass authentication due to a fundamental error, allowing attackers to elevate their privileges.

The vulnerability of the software for managing OpenEdge Authentication Gateway lies in the ability to bypass authentication due to a fundamental error. Exploiting this vulnerability could allow an attacker, operating remotely, to increase their privileges...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-23717

In accesssecureservicefromtempbond of btmsec.cc, there is a possible way to achieve keystroke injection due to improper input validation. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2024-23717

CVE-2024-23717 affects Google's Android Bluetooth stack. The vulnerability is in the function access_secure_service_from_temp_bond of btm_sec.cc , caused by improper input validation, enabling keystroke injection and potential remote (proximal/adjacent) elevation of privilege without additional e...