1946 matches found
SUSE CVE-2024-57604
An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component...
The vulnerability of Microprogramming Software in the Wiren Board controller lies in the lack of implementation for authentication when changing access rights, allowing attackers to escalate their privileges.
The vulnerability of the Microprogramming Software of the Wiren Board controller is related to the absence of authentication mechanisms for changing access rights. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of Zoom’s video conferencing software is related to the overflowing of buffers in dynamic memory, allowing attackers to exploit their privileges.
The vulnerability of Zoom’s video conferencing software is related to overflowing buffers in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...
The vulnerability of the Splunk App for SOAR software lies in its insecure management of privileges, allowing attackers to elevate their privileges.
The vulnerability of the Splunk App for SOAR software relates to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
CVE-2025-26634
Heap-based buffer overflow in Windows Core Messaging allows an authorized attacker to elevate privileges over a network...
The vulnerability of the software platform for developing and managing Adobe Commerce B2B, related to violations of secure design principles, allows attackers to enhance their privileges.
The vulnerability of the software platform for developing and managing Adobe Commerce B2B is related to the violation of secure design principles. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges...
The vulnerability of the PROCON-WIN SCADA system, which stems from the use of rigidly encoded account data, allows a intruder to increase their privileges.
The vulnerability of the PROCON-WIN SCADA system is related to the use of strictly encrypted account data. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2025-25450
An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the deactivation of the activated second factor to the /session endpoint...
Linux Distros Unpatched Vulnerability : CVE-2019-25067
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as critical, was found in Podman and Varlink 1.5.1. This affects an unknown part of the component API. The manipulation...
Linux Distros Unpatched Vulnerability : CVE-2016-7943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The XListFonts function in X.org libX11 before 1.6.4 might allow remote X servers to gain privileges via vectors involving length fields, which trigger...
Linux Distros Unpatched Vulnerability : CVE-2012-4820
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and...
CVE-2025-20646
In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...
CVE-2025-20646
In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...
CVE-2025-20646
In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...
CVE-2025-20646
In wlan AP FW, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00389074; Issue ID: MSV-1803...
MediaTek Chipsets 缓冲区错误漏洞
MediaTek Chipsets is a series of chips from China's MediaTek MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from improper input validation and could lead to remote elevation of privilege...
The vulnerability of the dockerd software for managing SAN networks with Brocade SANnav allows a hacker to increase their privileges.
The vulnerability of the dockerd software for managing SAN networks in Brocade SANnav systems is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...
The vulnerability of the PAN-OS operating system lies in its inability to neutralize special elements used in the operating system’s commands. This allows attackers to circumvent security restrictions, enhance their privileges, and execute arbitrary commands.
The vulnerability of the PAN-OS operating system is related to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a malicious actor to bypass security restrictions, enhance their privileges, and execute arbitrary...
The vulnerability of the runas function in the microprogramming software of the digital analysis system MEAC300 allows a hacker to elevate their privileges to the level of an administrator.
The vulnerability of the runas function in the MEAC300 digital analysis system is related to insufficient protection for registration data. Exploiting this vulnerability can allow an attacker, operating remotely, to elevate their privileges to the level of an administrator...