The vulnerability of the hmac.compare_digest function in the Lib/hmac.py library of the Python interpreter allows a attacker to enhance their privileges.

The vulnerability of the hmac.comparedigest function in the Lib/hmac.py library of the Python interpreter is related to synchronization errors when using a shared resource “Race Condition”. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the HP LIFE mobile application for Android, related to information disclosure, allows attackers to increase their privileges.

The vulnerability of the HP LIFE mobile application for Android relates to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

CVE-2023-43960

An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component...

D-Link DPH-400SE Security Vulnerability

The D-Link DPH-400SE is an IP phone from China AUO D-Link. A security vulnerability exists in the D-Link DPH-400SE FRU version 2.2.15.8, which originated from a vulnerability that allows remote attackers to escalate privileges via the user modification feature in the Maintenance/Access feature...

The vulnerability of the Pure Storage Purity software for managing flash drives is related to deficiencies in access control, allowing attackers to increase their privileges.

The vulnerability of the Pure Storage Purity flash storage controller software is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

PT-2023-29051 · D Link · Dlink Dph-400Se

Name of the Vulnerable Software and Affected Versions: DLINK DPH-400SE FRU version 2.2.15.8 Description: An issue in the software allows a remote attacker to escalate privileges via the User Modify function in the Maintenance/Access function component. Recommendations: For DLINK DPH-400SE FRU...

Advisory ROSA-SA-2023-2240

software: pcs 0.10.7 WASP: ROSA-CHROME packageevrstring: pcs-0.10.7-3.src.rpm CVE-ID: CVE-2022-2735 BDU-ID: 2022-05554 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the corosync/pacemaker PCS configuration utility is related to flaws in the authentication procedure. Exploitation of the vulnerabili...

The vulnerability of Acronis Cyber Protect 15’s data protection software lies in the absence of an authentication procedure, which allows attackers to increase their privileges.

The vulnerability of Acronis Cyber Protect 15 software-related data protection software lies in the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its uncontrolled search path, which allows attackers to exploit their privileges.

The vulnerability of backup and data recovery software on computers and servers is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System (GMS), a global network firewall management system, stems from the rigid encoding of application Tomcat’s configuration files. This allows attackers to exploit their privileges.

The vulnerability of the SonicWall Analytics analytical service and the SonicWall Global Management System GMS global network management system is related to the rigid encoding of application Tomcat’s configuration files. Exploiting this vulnerability can allow a malicious actor to increase their...

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center’s date center, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the Atlassian Confluence Server web server and the Confluence Data Center are related to lack of access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2023-20819

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: MOLY01068234; Issue ID: ALPS08010003...

Out-of-bounds

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: MOLY01068234; Issue ID: ALPS08010003...

CVE-2023-20819

In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no additional execution privilege needed. User interaction is not needed for exploitation. Patch ID: MOLY01068234; Issue ID: ALPS08010003...

PT-2023-17640 · Unknown · Cdma Ppp Protocol

Name of the Vulnerable Software and Affected Versions: CDMA PPP protocol affected versions not specified Description: The issue is related to a missing bounds check in the CDMA PPP protocol, which could lead to an out of bounds write. This could result in remote escalation of privilege with no...

OESA-2023-1697 python-gevent security update

gevent is a coroutine -based Python networking library that uses greenlet to provide a high-level synchronous API on top of the libev or libuv event loop. Security Fixes: An issue in Gevent Gevent before version 23.9.1 allows a remote attacker to escalate privileges via a crafted script to the...

The vulnerability of the dumpHeap method in the Avalanche mobile device management system allows a hacker to escalate their privileges.

The vulnerability of the dumpHeap method in the Avalanche mobile device management system is related to errors during the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2023-43457

An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint...

CVE-2023-43457

An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint...

Gevent Security Breach

gevent is a Python library from gevent open source. A security vulnerability exists in Gevent versions prior to 23.9.1. A remote attacker exploited the vulnerability to escalate privileges via a specially crafted script...