CVE-2020-8948

The Sierra Wireless Windows Mobile Broadband Driver Packages MBDP before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system privileges...

Hardcoded credentials

The Sierra Wireless Windows Mobile Broadband Driver Packages MBDP before build 5043 allows an unprivileged user to overwrite arbitrary files in arbitrary folders using hard links. An unprivileged user could leverage this vulnerability to execute arbitrary code with system privileges...

CVE-2020-8948

The CVE-2020-8948 entry concerns Sierra Wireless Windows Mobile Broadband Driver Packages (MBDP) prior to build 5043. The vulnerability allows an unprivileged user to overwrite arbitrary files in arbitrary folders via hard links, which could enable execution of arbitrary code with SYSTEM privileg...

CVE-2020-10642

In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic...

Design/Logic Flaw

In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic...

CVE-2020-10642

In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic...

QQBrowser Elevation of Privilege Vulnerability

Tencent QQBrowser is a Web browser from Tencent, a Chinese company. A security vulnerability exists in Tencent QQBrowser versions prior to 10.5.3870.400, which originates from the NT AUTHORITYAuthenticated Users group, where a person can write the TsService.exe file. A local attacker can exploit...

CVE-2020-1988

An unquoted search path vulnerability in the Windows release of Global Protect Agent allows an authenticated local user with file creation privileges on the root of the OS disk C:\ or to Program Files directory to gain system privileges. This issue affects Palo Alto Networks GlobalProtect Agent 5...

CVE-2020-1984

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk C:\ to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo...

CVE-2020-1984

CVE-2020-1984 affects Palo Alto Networks Secdo on Windows. Description: Secdo can try to execute a script at a hardcoded path; if present, a local authenticated user with the ability to create folders or append data at the root of C:\ can obtain system privileges when the path does not exist or i...

CVE-2020-1984 Secdo: Privilege escalation via hardcoded script path

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk C:\ to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo...

Secdo: Privilege escalation via hardcoded script path

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk C:\ to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo...

CVE-2020-1984

Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with ‘create folders or append data’ access to the root of the OS disk C: to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo f...

Unspecified Vulnerability in Samsung Mobile Devices (CNVD-2020-36250)

Android is a free and open source operating system from Google based on the Linux kernel without GNU components. An unspecified vulnerability exists in Samsung mobile devices, which can be exploited by an attacker to perform any operation with system privileges...

Code injection

An issue was discovered on Samsung mobile devices with N7.x software. Persona has an unprotected API that allows launch of any activity with system privileges. The Samsung ID is SVE-2017-9000 June 2017...

Malwarebytes AdwCleaner Code Issue Vulnerability (CNVD-2020-23411)

Malwarebytes AdwCleaner is a utility program from the American company Malwarebytes. The program is mainly used to scan and remove pre-installed software such as advertisements from Windows computers. A code issue vulnerability exists in Malwarebytes AdwCleaner version 8.0.3. The vulnerability ca...

CVE-2020-11507

An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded...

CVE-2020-11507

An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded...

Design/Logic Flaw

An Untrusted Search Path vulnerability in Malwarebytes AdwCleaner 8.0.3 could cause arbitrary code execution with SYSTEM privileges when a malicious DLL library is loaded...

CVE-2020-11507

CVE-2020-11507 relates to Malwarebytes AdwCleaner 8.0.3 and describes an Untrusted Search Path vulnerability that can lead to arbitrary code execution with SYSTEM privileges if a malicious DLL is loaded. Affected software: Malwarebytes AdwCleaner 8.0.3. Root cause: untrusted DLL search path handl...