1665 matches found
IBM MQ service trace module elevation of privilege vulnerability
IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM. It provides a reliable and proven messaging backbone for Service Oriented Architecture SOA. service trace module is one of the service trace modules. An elevation of privilege vulnerability exists in the service...
CVE-2018-0790
Microsoft SharePoint Foundation 2010, Microsoft SharePoint Server 2013 and Microsoft SharePoint Server 2016 allow an elevation of privilege vulnerability due to the way web requests are handled, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0789...
Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-02174)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA in the U.S. Qualcomm is one of the Qualcomm components used in Qualcomm devices. The Google Android Qualcomm component has an elevation of privilege vulnerability that can be...
Google Android NVIDIA Driver Elevation of Privilege Vulnerability
Android is a Linux-based open source operating system developed by Google and the Open Handheld Alliance OHA, and Nvidia driver is a graphics driver developed by NVIDIA. An elevation of privilege vulnerability exists in the Nvidia driver in Android. A remote attacker could exploit this...
Google Android Media Framework elevation of privilege vulnerability (CNVD-2018-00635)
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and MediaFramework is one of the frameworks used for multimedia development. An elevation of privilege vulnerability exists in Media Framework in Android versions 8.0 and 8.1. A...
Octopus Deploy elevation of privilege vulnerability (CNVD-2018-03076)
Octopus Deploy is an automation tool from Octopus Deploy Australia for development and deployment of . A security vulnerability exists in Octopus Deploy versions 3.2.11 through 4.1.5. An attacker can exploit the vulnerability to bypass jurisdiction restrictions and potentially elevate privileges...
CVE-2018-0751
The Windows Kernel API in Windows 8.1 and RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way the Kernel API enforces permissions, aka "Windows Elevation ...
PT-2018-2785 · Microsoft · Windows 8.1 +8
Name of the Vulnerable Software and Affected Versions: Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 versions 1511 through 1709 Windows Server 2016 Windows Server, version 1709 Description: The issue is related to errors in access...
Cambium Networks cnPilot Direct Object Reference Elevation of Privilege Vulnerability
Cambium Networks cnPilot is a cloud-enabled managed single-band router product from Cambium Networks, USA. A security vulnerability exists in Cambium Networks cnPilot using firmware version 4.3.2-R4 and earlier. An attacker can exploit the vulnerability with the help of a direct object reference ...
Fortinet FortiClient Windows Elevation of Privilege Vulnerability
Fortinet FortiClient Windows is a Windows-based mobile endpoint security solution from Fortinet. The solution provides IPsec and SSL encryption, WAN optimization, endpoint compliance and two-factor authentication when connected to a FortiGate firewall appliance. A privilege-lifting vulnerability...
Intel Graphics Driver Content Protection HECI Service Local Elevation of Privilege Vulnerability
Intel Graphics Driver is an integrated graphics driver developed by Intel Corporation.Content Protection HECI Service is one of the content protection services. A local elevation of privilege vulnerability exists in the Content Protection HECI Service in Intel Graphics Driver. An attacker can...
CVE-2017-13156
An elevation of privilege vulnerability in the Android system art. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64211847...
CVE-2017-13154
An elevation of privilege vulnerability in the Android media framework libstagefright. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-63666573...
CVE-2017-0870
An elevation of privilege vulnerability in the Android framework libminikin. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807...
UBUNTU-CVE-2017-13166
An elevation of privilege vulnerability in the kernel v4l2 video driver. Product: Android. Versions: Android kernel. Android ID A-34624167...
UBUNTU-CVE-2017-13174
An elevation of privilege vulnerability in the kernel edl. Product: Android. Versions: Android kernel. Android ID A-63100473...
CVE-2017-0870
An elevation of privilege vulnerability in the Android framework libminikin. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-62134807...
Google Android Kernel MTP USB Driver Elevation of Privilege Vulnerability
Android on Google Pixel and Nexus is an open source Linux-based operating system for Google Pixel and Nexus smartphones developed by Google and the Open Handheld Alliance OHA.Kernel MTP USB driver is a USB data transfer driver using the Kernel MTP USB driver is one of the USB data transfer driver...
Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2017-36523)
Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Graphics Qualcomm component. An attacker can exploit this vulnerability to achieve elevation of...
Google Android System(art) elevation of privilege vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA in the U.S. System art is an ART mode runtime environment used in it. An elevation of privilege vulnerability exists in Systemart in Android. A remote attacker can exploit this...