9342 matches found
PT-2023-26575 · Ibm · Ibm I +1
Name of the Vulnerable Software and Affected Versions: IBM i versions 7.2 through 7.5 Description: The Facsimile Support for i product in IBM i contains a local privilege escalation issue. A malicious actor could gain access to a command line with elevated privileges, allowing root access to the...
Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2023-64869)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An elevation of privilege vulnerability exists in Microsoft Exchange Server, which can be exploit...
Microsoft Azure Arc Elevation of Privilege Vulnerability
Microsoft Azure is a set of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. A privilege full vulnerability exists in Microsoft Azure Arc. An attacker can exploit this vulnerability to gain elevated privileges on the system...
Snow Software license manager SQL injection vulnerability
Snow Software Snow License Manager SLM is the central hub of the Snow Software Asset Management platform from Snow Software, Sweden. A security vulnerability exists in Snow Software license manager versions 8.0.0 through 9.30.1 that originates from allowing a user with elevated privileges to inje...
Intel BIOS firmware security vulnerability
Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel Processors BIOS firmware that stems from improper access control. An attacker could exploit the vulnerability...
Siemens Software Center DLL Hijacking Vulnerability
Siemens Software Center allows the download, installation and activation of purchased software. A DLL hijacking vulnerability exists in Siemens Software Center, which can be exploited by an attacker to execute code with elevated privilege by placing a malicious DLL in a directory on the DLL searc...
Vulnerabilities fixed in Adobe Commerce and Magento
Adobe has fixed vulnerabilities in Commerce and Magento. A malicious party could exploit the vulnerabilities to gain access to system data, or to grant himself elevated privileges and execute arbitrary code with elevated privileges. To obtain elevated privileges and execute code, the the maliciou...
Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.12 and earlier
Summary This fix upgrades to node 18.16.1. Vulnerability Details CVEID:CVE-2023-30584 DESCRIPTION: Node.js could allow a remote attacker to bypass security restrictions, caused by a path traversal bypass when verifying file permissions. By sending a specially crafted request, an attacker could...
CVE-2023-38641
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. The affected application's database service is executed as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
CVE-2021-41544
A vulnerability has been identified in Siemens Software Center All versions V3.0. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path...
Design/Logic Flaw
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. The affected application's database service is executed as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
Path traversal
A vulnerability has been identified in Siemens Software Center All versions V3.0. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path...
CVE-2023-38641
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. The affected application's database service is executed as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
CVE-2023-38641
Siemens SICAM TOOLBOX II is affected by CVE-2023-38641 (Execute with Unnecessary Privileges). All versions prior to V07.10 expose a database service running as NT AUTHORITY\SYSTEM, enabling a local attacker with low privileges and no user interaction to execute OS commands with elevated privilege...
CVE-2023-38641
A vulnerability has been identified in SICAM TOOLBOX II All versions V07.10. The affected application's database service is executed as NT AUTHORITY\SYSTEM. This could allow a local attacker to execute operating system commands with elevated privileges...
CVE-2021-41544
A vulnerability has been identified in Siemens Software Center All versions V3.0. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path...
CVE-2021-41544
A vulnerability has been identified in Siemens Software Center All versions V3.0. A DLL Hijacking vulnerability could allow a local attacker to execute code with elevated privileges by placing a malicious DLL in one of the directories on the DLL search path...
postgresql: schema_element defeats protective search_path changes
A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...
postgresql: schema_element defeats protective search_path changes
A flaw was found in PostgreSQL. Certain database calls could permit an attacker with elevated database-level privileges to execute arbitrary code...
Microsoft Windows Kernel Security Vulnerability
Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are affected:Windows 10...