b2evolution cross-site request forgery vulnerability

b2evolution is a PHP and MySQL-based community content management system. b2evolution CMS v7.2.3 is vulnerable due to a cross-site request forgery CSRF contained in the user login page. An attacker could exploit this vulnerability to elevate privileges...

Trend Micro Worry-Free Business Security has an unspecified vulnerability (CNVD-2022-08933)

Trend Micro Worry-Free Business Security is an enterprise-class information security protection solution from Trend Micro, Inc. The product provides anti-spam, anti-virus, network security and email protection features.A security vulnerability exists in Trend Micro Worry-Free Business Security,...

Adobe Photoshop 2021 out-of-bounds read vulnerability

Adobe Photoshop, or "PS" for short, is an image processing software developed and distributed by Adobe. Adobe Photoshop 2021 22.5.1 and earlier versions contain an out-of-bounds read vulnerability. An attacker could exploit this vulnerability to elevate privileges...

Code injection

An issue was discovered in Nagios XI 5.8.5. Insecure file permissions on the nagiosunbundler.py file allow the nagios user to elevate their privileges to the root user...

Privilege Escalation

os/exec in github.com/golang/go is vulnerable to Privilege Escalation. A nil environment is created with a non-nil token when the process creation is mishandled in windows allowing attackers to acquire sensitive information or elevate privileges...

Microsoft Windows Multiple Vulnerabilities (KB5006743)

This host is missing a critical security update according to Microsoft KB5006743 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Android Elevation of Privilege Vulnerability (CNVD-2021-80276)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handset Alliance OHA. an elevation of privilege vulnerability exists in the Framework component of Google Android. An attacker could exploit this vulnerability to execute arbitrary code in the context of a...

Samba 1.9.18 Elevate Privileges Vulnerability (CVE-1999-1288)

Samba is prone to a elevate privileges vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Samba 3.2.0 <= 3.2.2 Elevate Privileges Vulnerability (CVE-2008-3789)

Wrong permissions of groupmapping.ldb. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute i...

Privilege escalation

The vCenter Server contains multiple local privilege escalation vulnerabilities due to improper permissions of files and directories. An authenticated local user with non-administrative privilege may exploit these issues to elevate their privileges to root on vCenter Server Appliance...

Vulnerabilities fixed in Zoho ManageEngine ADManager Plus Pro

Vulnerabilities have been fixed in ManageEngine ADManager Plus Pro. The vulnerabilities allow a malicious person to launch attacks execute attacks that result in the following categories of damage: Manipulation of data. Circumvention of security measure Remote code execution User rights Increased...

CVE-2021-34719

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

Design/Logic Flaw

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-34786 Cisco BroadWorks CommPilot Application Software Vulnerabilities

Multiple vulnerabilities in Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker to delete arbitrary user accounts or gain elevated privileges on an affected system...

CVE-2021-34728 Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerabilities

Multiple vulnerabilities in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker with a low-privileged account to elevate privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory...

CVE-2021-30724

This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local attacker may be able to elevate their privileges...

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

CVE-2021-35946

A receiver of a federated share with access to the database with ownCloud version before 10.8 could update the permissions and therefore elevate their own permissions...

Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1578

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller APIC and Cisco Cloud Application Policy Infrastructure Controller Cloud APIC could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected device. This vulnerability is d...