PT-2022-3844 · Microsoft · Active Directory Federation Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Federation Services affected versions not specified Description: The issue is related to insufficient access restrictions in Active Directory Federation Services AD FS on Windows operating systems. It allows a remote attacker...

PT-2022-3798 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in the Azure Site Recovery emergency recovery tool for VMWare to Azure, which can be exploited by a remote attacker to...

USN-5509-1 dovecot vulnerability

Julian Brook discovered that Dovecot incorrectly handled multiple passdb configuration entries. In certain configurations, a remote attacker could possibly use this issue to escalate privileges...

The vulnerability of the Dovecot mail server’s passdb account database allows a hacker to escalate their privileges.

The vulnerability of the Dovecot mail server’s passdb database account database is related to configuration errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the RegexRequestMatcher component in the Spring Security Java framework allows attackers to escalate their privileges.

The vulnerability of the RegexRequestMatcher component in the Spring Security Java framework, which is used for securing industrial applications, is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the Video Station photo album creation application, related to deficiencies in the authentication process, allows unauthorized users to elevate their privileges.

The vulnerability of the Video Station photo album creation application is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to increase their privileges...

The vulnerability of the /usr/local/sbin/webproject/set_param.cgi script in the Infiray IRAY-A8Z3 thermal imager software allows a intruder to escalate their privileges.

The vulnerability of the /usr/local/sbin/webproject/setparam.cgi file in the Infiray IRAY-A8Z3 thermal imager software is related to the use of pre-set user credentials. Exploiting this vulnerability could allow an attacker to gain increased privileges remotely...

The vulnerability of Splunk Enterprise’s deployment servers for operational analysis allows attackers to enhance their privileges.

The vulnerability of the Splunk Enterprise platform’s deployment servers is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

The vulnerability of the Nomad application orchestrator’s go-getter library allows a hacker to elevate their privileges.

The vulnerability of the Nomad application’s go-getter orchestrator library is related to deficiencies in access control when using the artifact stanza structure. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

Microsoft Edge browser’s vulnerability, related to insecure management of privileges, allows attackers to elevate their privileges.

The vulnerability of Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2022-3288 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insecure privilege management in Microsoft Edge. It allows a remote attacker to exploit the vulnerability and elevate their privileges...

CVE-2017-20111

A vulnerability, which was classified as critical, was found in Teleopti WFM 7.1.0. This affects an unknown part of the component Administration. The manipulation leads to improper privilege management. It is possible to initiate the attack remotely. The exploit has been disclosed to the public a...

Google Android out-of-bounds write vulnerability (CNVD-2022-53369)

Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android is vulnerable to an out-of-bounds write vulnerability, which can be exploited by attackers to cause remote privilege elevation...

The vulnerability of Emerson DeltaV industrial workstations, related to the use of cryptographic algorithms containing defects, allows attackers to exploit their privileges.

The vulnerability of Emerson DeltaV industrial workstations lies in the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of microprogrammed software in programmable logic controllers like ControlEdge, which stems from the use of rigidly encoded user data, allows attackers to exploit their privileges.

The vulnerability of microprogrammed software in programmable logic controllers like ControlEdge stems from the use of rigidly encoded user data. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the FTP server Titan FTP Server NextGen, related to the use of pre-installed credentials for the sa account, allows attackers to increase their privileges.

The vulnerability of the Titan FTP Server NextGen installer lies in the use of pre-installed credentials for the sa account. Exploiting this vulnerability allows a malicious actor to gain increased privileges remotely...

Bosch Ethernet switch PRA-ES8P2S 安全漏洞

Bosch Ethernet switch PRA-ES8P2S is a switch from Bosch, Germany. Bosch Ethernet switch PRA-ES8P2S has a security vulnerability in the user access rights checks, which can be exploited by remote attackers to submit special requests that can elevate privileges and gain administrator rights...

The vulnerability of the SCADA system SIMATIC WinCC, related to the possibility of using authentication on the client side, allows attackers to increase their privileges.

The vulnerability of the SCADA system SIMATIC WinCC is related to the possibility of using authentication on the client side. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the proxy-capsule-proxy module of the Capsule software tool, which allows for multi-tenancy in Kubernetes, enables attackers to increase their privileges.

The vulnerability of the capsule-proxy module of the Capsule software solution for providing multi-tenancy in Kubernetes is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

PT-2022-3072 · Brocade · Brocade Sannav

Name of the Vulnerable Software and Affected Versions: Brocade SANnav versions prior to 2.1.1.8 Brocade SANnav versions prior to SANN2.2.0.2 Description: The issue is related to the implementation of TLS/SSL Server in the Brocade SANnav software, which supports the use of static key ciphers on...