10805 matches found
Intel AMT Subsystem Input Validation Error Vulnerability (CNVD-2019-27317)
Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. An input validation error vulnerability exists in a subsystem in Intel AMT. The vulnerability originates from a network system or product that does not properl...
Intel AMT Subsystem Buffer Overflow Vulnerability
Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A buffer overflow vulnerability exists in a subsystem in Intel AMT. The vulnerability arises from a networked system or product performing operations on memory...
Intel ACU Wizard Privilege License and Access Control Issues Vulnerability
Intel ACU Wizard is an AMT configuration utility program from Intel Corporation USA. Intel ACU Wizard is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege permission and access control measures in a networked system or produc...
CVE-2019-0092
Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
CVE-2019-0094
Insufficient input validation vulnerability in subsystem for IntelR AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an unauthenticated user to potentially enable denial of service via adjacent network access...
CVE-2019-1000
An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the...
Privilege escalation
An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the...
CVE-2019-1000
CVE-2019-1000 affects Microsoft Azure Active Directory Connect (AD Connect) build 1.3.20.0. The vulnerability enables elevation of privilege by an attacker who authenticates to the AD Connect server to run two PowerShell cmdlets in the context of a privileged account, enabling privileged actions....
CVE-2019-1000
An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions.To exploit this, an attacker would need to authenticate to the...
Microsoft Azure Active Directory Connect Remote Elevation of Privilege Vulnerability (CNVD-2019-14680)
Microsoft Azure Active Directory Connect ADC is a service from Microsoft that provides identity and access management in the cloud. A remote elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect. It allows an attacker to execute two PowerShell Cmdlets in the...
Samba AD DC Principal Modification Vulnerability (CVE-2018-16860)
Samba is prone to a user impersonation vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:samba:samba"; ifdescription...
Debian DLA-1788-1 : samba security update
Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos extension used in Samba's Active Directory support was susceptible to man-in-the-middle attacks caused by incomplete checksum validation. For Debian 8 'Jessie', this problem has been fixed in version 2:4.2.14+dfsg-0+deb8u13. ...
[SECURITY] [DLA 1788-1] samba security update
Package : samba Version : 2:4.2.14+dfsg-0+deb8u13 CVE ID : CVE-2018-16860 Isaac Boukris and Andrew Bartlett discovered that the S4U2Self Kerberos extension used in Sambas Active Directory support was susceptible to man-in-the-middle attacks caused by incomplete checksum validation. For Debian 8...
Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US
Lenovo Security Advisory: LEN-26293 Potential Impact: Privilege escalation, denial of service, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2019-0086 , CVE-2019-0089 , CVE-2019-0090 , CVE-2019-0091 , CVE-2019-0092 , CVE-2019-0093 , CVE-2019-0094 ,...
Intel CSME, Server Platform Services, Trusted Execution Engine and Intel Active Management Technology Vulnerabilities - Lenovo Support US
No description provided...
Microsoft Azure AD Connect Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Azure Active Directory Connect build 1.3.20.0, which allows an attacker to execute two PowerShell cmdlets in context of a privileged account, and perform privileged actions. To exploit this, an attacker would need to authenticate to the...
PT-2019-2205 · Intel · Intel Active Management Technology
Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 11.8.65 Intel Active Management Technology versions prior to 11.11.65 Intel Active Management Technology versions prior to 11.22.65 Intel Active Management Technology versions prior to...
PT-2019-2206 · Intel · Intel Active Management Technology
Name of the Vulnerable Software and Affected Versions: Intel Active Management Technology versions prior to 12.0.35 Description: The issue is related to insufficient input validation in the Intel Active Management Technology subsystem. This could potentially allow a remote attacker to cause a...
Microsoft Internet Explorer CVE-2019-0921 Spoofing Vulnerability
Description Microsoft Internet Explorer is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to conduct spoofing attacks and perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft...
Microsoft Azure Active Directory Connect CVE-2019-1000 Remote Privilege Escalation Vulnerability
Description Microsoft Azure Active Directory Connect is prone to a remote privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Technologies Affected Microsoft Azure Active Directory Connect 1.3.20.0...