PT-2022-5762 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge and Google Chrome browsers. Exploitation of this issue may allow a remote attacker to elevate the...

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the Azure CycleCloud tool for organizing and managing high-performance computing environments is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Netlogon Remote Protocol (MS-NRPC) implementation in Windows operating systems allows a hacker to increase their privileges.

The vulnerability of the Netlogon Remote Protocol MS-NRPC implementation in Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems lies in the use of the cryptographic algorithm RC4-HMAC, which has vulnerabilities. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the password-changing function for accessing the web interface of Siemens SCALANCE and RUGGEDCOM industrial switches allows attackers to enhance their privileges.

The vulnerability of the password-changing function for accessing the web interface of Siemens SCALANCE and RUGGEDCOM industrial switches is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Windows operating system’s Workstation Service allows attackers to escalate their privileges.

The vulnerability of the Windows Operating System’s Workstation Service is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2022-5513

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description The issue is related to insufficient access controls in Microsoft Exchange Server, allowing a remote attacker to elevate their privileges. This vulnerability has been...

PT-2022-18506 · Sick · Sick Sim2000St

Name of the Vulnerable Software and Affected Versions: SICK SIM2000ST versions =1.7.0 Description: A password recovery issue allows an unprivileged remote attacker to invoke the password recovery mechanism method, gaining access to the user level defined as RecoverableUserLevel. This results in...

The vulnerability of the web interface of the operating system PAN-OS in the centralized network switch management system of Palo Alto Networks Panorama allows a hacker to enhance their privileges.

The vulnerability of the PAN-OS operating system’s web interface in the Palo Alto Networks Panorama network switch management system relates to the possibility of bypassing authentication. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of the Azure Arc for local infrastructure connection software in Azure Stack Edge storage services allows a perpetrator to escalate their privileges.

The vulnerability of the Azure Arc for local infrastructure connection software in Azure Stack Edge storage solutions is related to access control errors. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

ROS-20221013-05

A vulnerability in the PostgreSQL database management system is related to errors when using OR commands extensions. Exploitation of the vulnerability could allow an attacker acting remotely to escalate their privileges and replace arbitrary objects in the database...

PT-2022-5401 · Microsoft · Windows Workstation Service +1

Name of the Vulnerable Software and Affected Versions: Windows Workstation Service affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Workstation Service, allowing a remote attacker to elevate their privileges. This can affect the...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to insecure management of privileges, allowing a malicious actor to escalate their privileges remotely.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insecure management of privileges. Exploiting these vulnerabilities can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the GMapFP extension of the Joomla! content management system allows attackers to increase their privileges.

The vulnerability of the GMapFP extension in the Joomla! content management system is related to incorrect default access settings. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Login component in the file post_applogin.php is related to the ability to decode the session token of the Syncovery backup tool, which allows a hacker to increase their privileges.

The vulnerability of the Login component in the postapplogin.php file is related to the possibility of decoding the session token of the Syncovery backup tool. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

PT-2022-5351 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to errors in privilege management in the implementation of the Kerberos protocol in Windows operating systems. It allows a remote attacker to elevate their privileges...

The vulnerability of the vmw_cmd_res_check function in the vmwgfx driver (drivers/gpu/vmxgfx/vmxgfx_execbuf.c) of the Linux kernel allows a malicious actor to increase their privileges or cause service failures.

The vulnerability of the vmwcmdrescheck function in the vmwgfx driver drivers/gpu/vmxgfx/vmxgfxexecbuf.c in the Linux kernel relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause service failures...

The vulnerability in the component drivers/firmware/EFI/capsule-loader.c of the Linux operating system allows a hacker to increase their privileges or cause service failures.

The vulnerability of the drivers/firmware/efi/capsule-loader.c component of the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to increase their privileges or cause service interruptions...

The vulnerability of Kubernets Rancher cluster management software, related to unencrypted storage of user data, allows a hacker to escalate their privileges.

The vulnerability of Kubernets Rancher cluster management software is related to the unencrypted storage of user credentials. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the disaster recovery tool for Azure Site Recovery and VMWare to Azure, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...