252 matches found
Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
...
PT-2024-6659 · Microsoft · Autoupdate
Name of the Vulnerable Software and Affected Versions: Microsoft AutoUpdate MAU affected versions not specified Description: The issue is related to insufficient access restrictions in Microsoft AutoUpdate MAU for Mac, which can be exploited to elevate privileges. Recommendations: At the moment,...
Microsoft AutoUpdate for Mac 访问控制错误漏洞
Microsoft AutoUpdate for Mac is a Microsoft Product AutoUpdate application for the Mac platform from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft AutoUpdate for Mac. An attacker could exploit this vulnerability to elevate privileges. No information about th...
KLA73225 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of vulnerabilities: 1. An elevation ...
Bhojan Restaurant Management System 2.8 Insecure Direct Object Reference
==================================================================================================================================== | Title : Bhojon restaurant management system v2.8 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0.1 64...
The configuration vulnerability of Enable Client Autoupdate for the Remote Access End Point Control service of the SonicWall EPC software, which enables remote access to SonicWall SMA 100 network devices, allows a perpetrator to execute arbitrary code.
The vulnerability of the Enable Client Autoupdate configuration of the Remote Access End Point Control service provided by SonicWall NetExtender for remote access to SonicWall SMA 100 network devices is related to improper code generation. Exploiting this vulnerability could allow an attacker...
Multi Store Inventory Management System 1.0 Insecure Direct Object Reference
==================================================================================================================================== | Title : Multi Store Inventory Management System v1.0 IDOR Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 125.0....
PT-2024-5391
Name of the Vulnerable Software and Affected Versions SonicWall NetExtender versions 10.2.339 and earlier Description The issue is related to incorrect code generation management in the Enable Client Autoupdate service of the Remote Access End Point Control EPC in SonicWall NetExtender. This can...
Critical WooCommerce Payments Plugin Flaw Patched for 500,000+ WordPress Sites
Patches have been released for a critical security flaw impacting the WooCommerce Payments plugin for WordPress, which is installed on over 500,000 websites. The flaw, if left unresolved, could enable a bad actor to gain unauthorized admin access to impacted stores, the company said in an advisor...
GHSA-7C2M-VWXW-5QWW Improper Certificate Validation in Apache Netbeans
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. "Apache NetBeans" versions up to and including 11.2 are...
Improper Certificate Validation in Apache Netbeans
The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. "Apache NetBeans" versions up to and including 11.2 are...
Improper Verification of Cryptographic Signature in Apache Netbeans
The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability. NetBeans releases before the Apache transition started...
GHSA-CF8Q-J9H3-7237 Improper Verification of Cryptographic Signature in Apache Netbeans
The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability. NetBeans releases before the Apache transition started...
CVE-2020-23967
Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate...
CVE-2020-23967
Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate...
Privilege escalation
Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate...
CVE-2020-23967
CVE-2020-23967 affects Dr.Web Security Space versions 11 and 12. Local users can escalate privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate. Documented impact is privilege escalation with high severity; exploitation status is not detailed in the provided sources. No ...
CVE-2020-23967
Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate...
The vulnerability of the Microsoft AutoUpdate (MAU) for Mac application, which involves defects in the process of checking updates before they are installed, allows a malicious individual to escalate their privileges.
The vulnerability of the Microsoft AutoUpdate MAU for Mac application relates to deficiencies in the process of checking updates before they are installed. Exploiting this vulnerability can allow an attacker to enhance their privileges...