The vulnerability of the SAP ERP HCM workforce management software lies in the lack of authentication, which allows attackers to elevate their privileges.

The vulnerability of the SAP ERP HCM workforce management software is related to the lack of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2020-35273

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery CSRF to remotely gain privileges in the User Profile panel. An attacker can update any user's account...

The vulnerability of the Networking component in the Google Chrome web browser, which allows a hacker to increase their privileges

The vulnerability of the Networking component in the Google Chrome web browser is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Open WebRTC Toolkit, a software development tool, arises from the implementation of incorrect control flow management, allowing attackers to enhance their privileges.

The vulnerability of the Open WebRTC Toolkit development tool is related to the implementation of incorrect control flow. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool, related to insufficient flow management, allows a hacker to gain increased privileges.

The vulnerability of the Intel PROSet/Wireless WiFi networking connectivity tool is related to insufficient control over traffic. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Vulnerability in the microprogramming software subsystem of Intel Active Management Technology, which allows a perpetrator to enhance their privileges

The vulnerability in the microprogramming system implementation of Intel Active Management Technology is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the Rapid7 Nexpose vulnerability management system lies in the insufficient protection of the SQL query structure, allowing attackers to enhance their privileges.

The vulnerability of the Rapid7 Nexpose vulnerability management system is related to insufficient protection of the SQL query structure. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the asynchronous Moxa NPort 5100A server, related to security mechanisms’ deficiencies, allows attackers to escalate their privileges.

The vulnerability of the asynchronous Moxa NPort 5100A server is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

HPE OneView Synergy Composer Remote Elevation of Privilege Vulnerability

HPE HPE OneView and HPE Synergy Composer are both products of Hewlett Packard Enterprise HPE, U.S.A. HPE OneView is software that facilitates automated device management for the IT department.HPE Synergy Composer is an IT infrastructure that supports Portfolio and flexible expansion of IT...

PT-2020-4765 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to errors in privilege management within the Azure Sphere operating system. Exploitation of this issue may allow a remote attacker to elevate their privileges...

CVE-2020-7198

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2...

CVE-2020-7198

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2...

Design/Logic Flaw

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2...

CVE-2020-7198

There is a remote escalation of privilege possible for a malicious user that has a OneView account in OneView and Synergy Composer. HPE has provided updates to Oneview and Synergy Composer: Update to version 5.5 of OneView, Composer, or Composer2...

The vulnerability of the Azure Functions service’s operating system for Windows allows attackers to escalate their privileges.

The vulnerability of the Azure Functions service’s operating system for Windows is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules relates to writing beyond the buffer memory boundaries, allowing attackers to exploit their privileges.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to writing beyond the buffer memory boundaries. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

Aruba Airwave Software Remote Elevation of Privilege Vulnerability

Aruba Airwave Software is a network monitoring software that helps users view real-time data and situational reports for every user, device, and segment of the network. A remote elevation of privilege vulnerability exists in Aruba Airwave Software versions prior to 1.3.2. A low-privileged user ca...

The vulnerability of microprogramming software in server boards, server systems, and Intel computing modules arises from the lack of measures to protect input data. This allows attackers to exploit their privileges.

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of socket services in microprogramming software for server boards, server systems, and Intel computing modules is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of socket services in microprogramming software for server boards, server systems, and Intel computing modules is related to authentication deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...