The vulnerability of Hikvision’s IP cameras’ microprogramming software, related to authentication procedures that lack sufficient safeguards, allows intruders to exploit their privileges.

The vulnerability of Hikvision’s IP cameras related to microprogramming software lies in the deficiencies in authentication procedures. Exploiting this vulnerability can allow unauthorized actors to enhance their privileges remotely...

The vulnerability of the ZyXEL P-1302-T10 v3 router’s microprogramming software, related to deficiencies in data protection, allows attackers to exploit their privileges.

The vulnerability of the ZyXEL P-1302-T10 v3 router’s microprogramming software is related to deficiencies in data protection. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

The vulnerability of Huawei AR3200 router’s micro-programming software, related to authentication errors, allows attackers to escalate their privileges.

The vulnerability of Huawei AR3200 router’s micro-programming software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the reset function in industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 allows a intruder to gain increased privileges.

The vulnerability of the reset function in industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 lies in the absence of a new cryptographic key generation upon resetting settings. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privilege...

The vulnerability of the C-PLUG memory module in industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 allows a intruder to gain increased privileges.

The vulnerability of the C-PLUG memory module in industrial switches SCALANCE X-200, SCALANCE X-200IRT, and SCALANCE X-300 is related to the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

Cisco Application Services Engine 访问控制错误漏洞

Cisco Application Services Engine provides a common platform for deploying Cisco data center applications. An unauthorized access vulnerability exists in Cisco Application Services Engine version 1.13d and earlier, which can be exploited by a remote, unauthenticated attacker to elevate access to...

The vulnerability of Microsoft Azure Kubernetes operating system, which allows attackers to escalate their privileges

The vulnerability of Microsoft Azure Kubernetes operating system is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to escalate their privileges remotely...

The vulnerability of the component of the software framework for transmitting real-time streaming video and audio via WebRTC in the Intel Collaboration Suite, which allows attackers to enhance their privileges.

The vulnerability of the component of the software framework for transmitting real-time streaming video and audio in the Intel Collaboration Suite for WebRTC is related to inadequate control of data streams. Exploiting this vulnerability can allow a malicious actor to enhance their privileges...

Huawei EulerOS: Security Advisory for libexif (EulerOS-SA-2021-1315)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the IPv6 traffic processing services in Cisco IOS XR and Cisco NX-OS systems allows attackers to enhance their privileges.

The vulnerability of the IPv6 traffic processing service in Cisco IOS XR and Cisco NX-OS lies in errors in handling IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability in the vManage web interface of the software-defined Cisco SD-WAN network allows a attacker to elevate their privileges.

The vulnerability in the vManage web interface of the Cisco SD-WAN software exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server programs lies in the insecure management of privileges, allowing attackers to escalate their privileges.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Foundation, and Microsoft SharePoint Enterprise Server lies in the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2020-18714

SQL Injection in Rockoa v1.8.7 allows remote attackers to gain privileges due to loose filtering of parameters in wordModel.php's getdata function...

The vulnerability of the detection mechanism for applications in the Snort intrusion detection system allows attackers to increase their privileges.

The vulnerability of the detection mechanism of the Snort intrusion detection system is related to the implementation of an incorrect control flow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the Adobe Creative Cloud Desktop Application, related to insecure management of privileges, allows a malicious individual to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and enhance their privileges remotely...

The vulnerability of the admin/executar_login.php component of the Mk-Auth authentication software allows a hacker to escalate their privileges.

The vulnerability of the admin/executarlogin.php component in the Mk-Auth authentication software is related to errors in managing registration data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2020-23449

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through NewBeeMallIndexConfigServiceImpl.java. Unauthorized changes can be made to any user information through the userID...

CVE-2020-23448

This CVE concerns the NewBee-Mall application where all versions are affected by an incorrect access control flaw in AdminLoginInterceptor.java that allows bypassing authentication for the /admin area, enabling privilege escalation. The root cause is the bypass of the system’s authentication logi...

CVE-2020-23448

newbee-mall all versions are affected by incorrect access control to remotely gain privileges through AdminLoginInterceptor.java. The authentication logic of the system's background /admin is in code AdminLoginInterceptor, which can be bypassed...

newbee-mall 访问控制错误漏洞

newbee-mall is an e-commerce system. An access control error vulnerability exists in all versions of newbee-mall, where an attacker cannot remotely gain privileges via NewBeeMallIndexConfigServiceImpl. java, but can make unauthorized changes to any user information via userID...