CVE-2020-9668 AGSService program mishandling symbolic links

Adobe Genuine Service version 6.6 and earlier is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user...

Unisys Desktop OS Personal Edition suffers from a local extraction vulnerability

Unisys Desktop Operating System Personal Edition is Unisys software based on Linux5.3 kernel to create a domestic desktop operating system designed for individual users. Unisys Desktop Operating System Personal Edition has a local elevation of privileges vulnerability. An attacker can exploit the...

Microsoft Windows Multiple Vulnerabilities (KB5001382)

This host is missing a critical security update according to Microsoft KB5001382 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the...

CVE-2021-29440 Twig allowing dangerous PHP functions by default

Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the...

CVE-2021-1782

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a...

CVE-2021-1757

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges...

CVE-2020-9971

A logic issue was addressed with improved validation. This issue is fixed in watchOS 7.0, tvOS 14.0, iOS 14.0 and iPadOS 14.0, macOS Big Sur 11.0.1. A malicious application may be able to elevate privileges...

CVE-2020-29620

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges...

CVE-2020-29620

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave. A malicious application may be able to elevate privileges...

The vulnerability of GE Healthcare’s medical diagnostic equipment lies in the lack of protection for operational data. This allows unauthorized individuals to gain access to protected information or enhance their privileges.

The vulnerability of GE Healthcare’s medical diagnostic equipment is related to the lack of protection for operational data. Exploiting this vulnerability can allow an intruder, operating remotely, to gain unauthorized access to protected information or enhance their privileges...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the Update Stack Setup component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Microsoft Windows Multiple Vulnerabilities (KB5000802)

This host is missing a critical security update according to Microsoft KB5000802 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MediaTek cameraisp Buffer Overflow Vulnerability

MediaTek cameraisp is an image processor from China's MediaTek Mediatek. It is used to improve the quality of pictures. A buffer overflow vulnerability exists in MediaTek cameraisp that can be exploited by an attacker to elevate privileges...

D-Link DAP-1860 Remote Code Execution Vulnerability (CNVD-2022-38538)

The D-Link DAP-1860 is a WiFi range extender from D-Link, a Taiwan-based company. The D-Link DAP-1860 is vulnerable to a remote code execution vulnerability that could be exploited by attackers to elevate privileges and execute code in the device context...

Cisco Application Services Engine Unauthorized Access Vulnerability (CNVD-2021-12827)

Cisco Application Services Engine provides a common platform for deploying Cisco data center applications. An unauthorized access vulnerability exists in Cisco Application Services Engine 1.13d and earlier versions, which can be exploited by a remote, unauthenticated attacker to elevate access to...

Google Android display driver limit boost vulnerability

Google Android is an open source operating system based on Linux. A security vulnerability exists in the Google Android display driver, which can be exploited by a local attacker to submit a special request that can elevate privileges...

Google Android mtkpower memory corruption vulnerability

Google Android is an open source operating system based on Linux. A memory corruption vulnerability exists in Google Android mtkpower, which can be exploited by a local attacker to elevate privileges by submitting a special request...

Acronis True Image for Windows code issue vulnerability

Acronis True Image is a well-known data backup and restore software from Singapore-based Acronis. The software can be used to create drive and disk images and can restore images when a clean system is needed.Acronis True Image for Windows 2021 Update 3 previous versions have a code issue...

Microsoft Windows Multiple Vulnerabilities (KB4598285)

This host is missing a critical security update according to Microsoft KB4598285 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...