The vulnerability of the Etcd configuration store, related to incorrect authentication, allows attackers to escalate their privileges.

The vulnerability of the Etcd configuration store is related to the sending of authentication requests to the etcdserver with a username and password. Exploiting this vulnerability can allow an attacker, operating remotely, to increase their privileges...

The vulnerability of Dell Enterprise SONiC operating systems, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of Dell Enterprise SONiC operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

ROS-20240411-02

The Etcd configuration parameter store vulnerability is related to sending an authentication request to the etcdserver with a username and password. Exploitation of the vulnerability could allow an attacker, acting remotely to escalate their privileges...

PT-2024-22896 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Humble Hawksbill versions 2 Description: An unauthorized node injection issue allows remote attackers to escalate privileges and inject malicious ROS2 nodes into the system. Recommendations: For ROS2 Humble Hawksbill version 2, consider...

PT-2024-4666 · Microsoft · Azure Arc-Enabled Kubernetes Extension Cluster

Name of the Vulnerable Software and Affected Versions: Azure Arc-enabled Kubernetes Extension Cluster affected versions not specified Description: The issue is related to insufficient access controls in Azure Arc-enabled Kubernetes extensions, which can be exploited by a remote attacker to elevat...

PT-2024-3201 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to inadequate access control in Microsoft Defender for IoT, which can be exploited by a remote attacker to elevate their privileges. Recommendations:...

PT-2024-2831 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to insufficient access control in Microsoft Defender for IoT, which could allow a remote attacker to elevate their privileges. Recommendations: At th...

PT-2024-3200 · Microsoft · Defender For Iot

Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to inadequate access control in Microsoft Defender for IoT, which can be exploited by a remote attacker to elevate their privileges. Recommendations:...

PT-2024-23558 · Ros2 · Ros2

Name of the Vulnerable Software and Affected Versions: ROS2 Iron Irwini versions 2 Description: The issue allows a malicious user to escalate privileges by injecting malicious ROS2 nodes into the system remotely. Recommendations: For ROS2 Iron Irwini version 2, at the moment, there is no...

The vulnerability of the Grafana monitoring and surveillance platform, related to bypassing authentication through spearphishing, allows attackers to gain unauthorized access to information and compromise its integrity and availability.

The vulnerability of the Grafana monitoring and observation platform is related to the escalation of privileges from the administrator to another administrator when using a authentication proxy server. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized...

CVE-2024-20040

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 for MT6XXX chipsets / WCNCR00363530...

CVE-2024-20040

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08360153 for MT6XXX chipsets / WCNCR00363530...

The vulnerability of the Splunk Enterprise platform for operational analysis, related to the disclosure of information through registration files, allows attackers to enhance their privileges.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to the disclosure of information through registration files. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the web interface of the operating system PAN-OS in the centralized network switch management system of Palo Alto Networks Panorama allows a hacker to enhance their privileges.

The vulnerability of the PAN-OS operating system’s web interface in the Palo Alto Networks Panorama network switch management system is related to insecure privilege management. Exploiting this vulnerability allows a malicious actor to enhance their privileges remotely...

Ubuntu 16.04 LTS : Linux kernel (AWS) vulnerabilities (USN-6700-2)

The remote Ubuntu 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6700-2 advisory. It was discovered that the Layer 2 Tunneling Protocol L2TP implementation in the Linux kernel contained a race condition when releasing PPPoL2TP sockets ...

PT-2024-4469 · Opentext · Opentext Content Manager

Name of the Vulnerable Software and Affected Versions: OpenText Content Manager affected versions not specified Description: The issue is related to insecure privilege management in OpenText Content Manager. It allows a remote attacker to elevate privileges or perform arbitrary actions...

The vulnerability of Microsoft Visual Studio Code’s editor, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of Microsoft Visual Studio Code’s editor is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2023-50677

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

CVE-2023-50677: Improper Privilege Management

An issue in NETGEAR-DGND4000 v.1.1.00.151.00.15 allows a remote attacker to escalate privileges via the nextfile parameter to the /setup.cgi component...

PT-2024-2149 · Microsoft +1 · Visual Studio Code +1

Name of the Vulnerable Software and Affected Versions: Visual Studio Code affected versions not specified Description: The issue is related to insufficient access restrictions in the editor, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there ...