The vulnerability of the BIOS microprogramming system of Intel processors allows attackers to disclose protected information.

The vulnerability of the BIOS microprogramming system of Intel processors is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Microsoft Windows Defender operating system allows attackers to increase their privileges.

The vulnerability of Microsoft Windows Defender operating system is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the disaster recovery tool for Azure virtual machines, Azure Site Recovery, and VMWare to Azure, related to access control deficiencies, allows attackers to bypass security restrictions and enhance their privileges.

The vulnerability of the disaster recovery tool for Azure Virtual Machines, Azure Site Recovery, and VMWare to Azure is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass system security restrictions and enhance their privileges...

The vulnerability of the BIOS microprogramming system of Intel processors allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the BIOS microprogramming system of Intel processors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

PT-2022-3850 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the context of VMWare to Azure recovery. It may allow a remote attacker to disclose...

The vulnerability of the Nomad application orchestrator’s go-getter library allows a hacker to elevate their privileges.

The vulnerability of the Nomad application’s go-getter orchestrator library is related to deficiencies in access control when using the artifact stanza structure. Exploiting this vulnerability could allow an attacker to enhance their privileges remotely...

The vulnerability of the IPersistFile interface implementation in the Matrikon OPC Server allows a perpetrator to execute arbitrary code.

The vulnerability of the IPersistFile interface implementation in the Matrikon OPC Server is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure (OMI) for virtual machine management in Azure allows attackers to escalate their privileges due to lack of access control mechanisms.

The vulnerability of the enterprise management server through the Internet-based Open Management Infrastructure OMI extensions for managing virtual machines in Azure is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the `startLegacyVpnPrivileged` component in Android operating systems allows a hacker to elevate their privileges.

The vulnerability of the startLegacyVpnPrivileged component in Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Extensions API component in Google Chrome and Microsoft Edge browsers allows a hacker to disclose protected information.

The vulnerability of the Extensions API for Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created web page...

CVE-2021-41637

Weak access control permissions in MELAG FTP Server 2.2.0.4 allow the "Everyone" group to read the local FTP configuration file, which includes among other information the unencrypted passwords of all FTP users...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the Win32k.sys component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges by using a specially created application...

The vulnerability of the getMBeanInstantiator method in the JmxMBeanServer class of the Java Runtime Environment allows a perpetrator to execute arbitrary code.

The vulnerability of the getMBeanInstantiator method in the JmxMBeanServer class of the Java Runtime Environment software platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of PowerShell command interpreters, related to deficiencies in access control, allows attackers to execute arbitrary code.

The vulnerability of PowerShell command interpreters is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code...

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems, related to deficiencies in access control, allows attackers to enhance their privileges.

The vulnerability of microprogramming software in embedded Qualcomm Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the WinSock driver of the Microsoft Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the WinSock driver in the Microsoft Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the Win32k component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the JEA (Just Enough Administration) security technology implementation in the hybrid cloud platform of Dell EMC Integrated System for Microsoft Azure Stack Hub allows a malicious individual to increase their privileges.

The vulnerability of the JEA Just Enough Administration security technology implemented on the Dell EMC Integrated System for Microsoft Azure Stack Hub hybrid cloud platform is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to increase their...

The vulnerability of the httpd daemon in the microprogramming software of TP-Link’s TL-WR940N router allows a intruder to gain unauthorized access to protected information.

The vulnerability of the httpd daemon in the microprogramming-based router software from TP-Link’s TL-WR940N is related to deficiencies in access control. Exploiting this vulnerability could allow a hacker to gain unauthorized access to protected information...

CVE-2022-22854

An access control issue in hprms/admin/?page=user/list of Hospital Patient Record Management System v1.0 allows attackers to escalate privileges via accessing and editing the user list...