1946 matches found
The vulnerability of the org.xwiki.platform:xwiki-platform-wiki-rest-default component of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability allows attackers to escalate their privileges.
The vulnerability of the “org.xwiki.platform:xwiki-platform-wiki-rest-default” component of the XWiki Platform’s collaborative web application framework is related to improper authentication. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
ASB-A-251514171
In smpprocesssecureconnectionoobdata of smpact.cc, there is a possible way to bypass SMP authentication due to Incorrect implementation of a protocol. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the Microsoft Partner Center software lies in the insufficient validation of input data, which allows attackers to escalate their privileges.
The vulnerability of the Microsoft Partner Center cloud platform is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to gain increased privileges remotely...
The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to escalate their privileges.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to enhance their privileges...
The vulnerability of the SAML (Security Assertion Markup Language) technology in the PAN-OS operating system allows a perpetrator to increase their privileges.
The vulnerability of the SAML Security Assertion Markup Language technology in the PAN-OS operating system is related to improper session management. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...
The vulnerability of the web interface of the microprogramming software for routers EDIMAX BR-6478AC allows a hacker to elevate their privileges and execute arbitrary commands.
The vulnerability of the web interface of the microprogrammed software router EDIMAX BR-6478AC is related to the lack of measures taken for data cleaning at the management level. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and execute arbitrary commands...
The vulnerability of the graphical interface of the FortiSIEM security management system allows attackers to increase their privileges.
The vulnerability of the FortiSIEM security management graphical interface is related to deficiencies in the authentication mechanism. Exploiting this vulnerability allows a malicious actor to enhance their privileges by sending specially crafted HTTP requests remotely...
Vulnerability of the functions urllib.parse.urlsplit() and urlparse() in the Python programming language, which allows attackers to exploit these vulnerabilities to gain enhanced privileges.
The vulnerability of the urllib.parse.urlsplit and urlparse functions in the Python interpreter is related to improper validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...
The vulnerability of the Kerberos authentication network protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos authentication protocol for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...
RuoYi 安全漏洞
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v.4.8.0, which can be exploited by a remote attacker to elevate privileges via the jobLogId parameter...
RuoYi 安全漏洞
RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v.4.8.0, which can be exploited by a remote attacker to elevate privileges via the menuId parameter...
PT-2025-15253 · Ruoyi · Ruoyi
Name of the Vulnerable Software and Affected Versions: RUoYi version 4.8.0 Description: An issue in RUoYi allows a remote attacker to escalate privileges via the SysDictTypeController component. Recommendations: For RUoYi version 4.8.0, consider disabling the SysDictTypeController component as a...
SUSE CVE-2025-3069
Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2025-3070
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2025-3070
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
The vulnerability of the Microsoft Dataverse data management platform, related to incorrect authorization, allows a perpetrator to escalate their privileges.
The vulnerability of the Microsoft Dataverse data management platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
ASB-A-388480622
In initializeSwizzler of SkBmpStandardCodec.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
The vulnerability of the SmartFabric OS10 network operating system, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of the SmartFabric OS10 network operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...