The vulnerability of the security suite for cloud services and Palo Alto Networks’ Twistlock platform allows attackers to escalate their privileges.

The vulnerability of the cloud service protection system and Palo Alto Networks’ Twistlock platform is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges remotely...

The vulnerabilities of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 allow attackers to enhance their privileges.

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 is related to the use of strictly encrypted passwords for user roles such as root, debug-admin, cisco, admin, and guest. Exploiting this vulnerability allow...

The vulnerability of the Microsoft Outlook email client, related to errors in processing incoming messages, allows attackers to escalate their privileges.

The vulnerability of the Microsoft Outlook email client is related to errors in processing incoming messages. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the mwifiex_update_bss_desc_with_ie function in Linux kernel allows a hacker to escalate their privileges, cause service failures, or execute arbitrary code.

The vulnerability of the mwifiexupdatebssdescwithie function in the Linux kernel’s marvell/mwifiex/scan.c file arises from an operation that occurs outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to gain elevated privileges, cause service failures, or...

The vulnerability of the virtlockd-admin.socket and virtlogd-admin.socket modules of the Libvirt management library allows attackers to increase their privileges.

The vulnerability of the virtlockd-admin.socket and virtlogd-admin.socket modules of the Libvirt management library is related to the absence of the SocketMode parameter. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the McAfee Enterprise Security Manager system, which exists due to an incorrect restriction on the path to the restricted catalog, allows attackers to increase their privileges.

The vulnerability of the McAfee Enterprise Security Manager critical threat detection system exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the McAfee Enterprise Security Manager system arises from an incorrect restriction on the path to the restricted directory. This allows attackers to elevate their privileges.

The vulnerability of the McAfee Enterprise Security Manager critical threat detection system exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of Microsoft Exchange Server servers, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft Exchange Server servers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Microsoft Exchange Server CVE-2019-1136 Remote Privilege Escalation Vulnerability

Description Microsoft Exchange Server is prone to a remote privilege-escalation vulnerability. Attackers can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Exchange Server 2010 SP3 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2016...

The vulnerability of the Intel Unite Client for Android conference communication software relates to deficiencies in access control, allowing attackers to escalate their privileges.

The vulnerability of the Intel Unite Client for Android conference software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Microsoft Azure Active Directory Connect software, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of the Microsoft Azure Active Directory Connect software lies in its lack of access control mechanisms. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of the Intel Dynamic Application Loader subsystem of the Intel Converged Security and Manageability Engine allows a perpetrator to enhance their privileges.

The vulnerability of the Intel Dynamic Application Loader DAL subsystem of the Intel Converged Security and Manageability Engine CSME is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

CVE-2019-11966

A remote privilege escalation vulnerability was identified in HPE Intelligent Management Center IMC PLAT earlier than version 7.3 E0506P09...

CVE-2019-11966

HPE Intelligent Management Center (IMC) PLAT earlier than 7.3 E0506P09 contains a remote privilege escalation vulnerability. The root cause is that operatorOnlineList_contentOnly stores sensitive information in clear text, enabling an attacker to escalate privileges on vulnerable IMC installation...

Vulnerability in the Intel Converged Security and Manageability Engine microprogramming subsystem, related to buffer overflow attacks, allows attackers to escalate their privileges.

The vulnerability in the Intel Converged Security and Manageability Engine CSME microprogramming subsystem is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

USN-3976-4 samba vulnerability

USN-3976-1 fixed a vulnerability in Samba. The update introduced a regression causing Samba to occasionally crash. This update fixes the problem. Original advisory details: Isaac Boukris and Andrew Bartlett discovered that Samba incorrectly checked S4U2Self packets. In certain environments, a...

Microsoft Windows Kernel CVE-2019-0881 Remote Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a remote privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...

Microsoft SharePoint Server CVE-2019-0957 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint...

PT-2019-2220 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insufficient access control in the Windows operating system kernel. It allows a remote attacker to elevate their privileges using a specially crafted application. Th...

Microsoft SharePoint Server CVE-2019-0958 Remote Privilege Escalation Vulnerability

Description Microsoft SharePoint Server is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft SharePoint Foundation 2013 SP1 Microsoft SharePoint Serv...