44894 matches found
EUVD-2026-85328
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...
LegacyHive
LegacyHive : Windows user profile service arbitrary hive load elevation of privileges vulnerability The PoC requires another standard user credentials and a third username which can be an administrator account, if the PoC is successful, it will end up mounting the target user hive in current user...
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge browsers allows attackers to elevate their privileges.
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2026-73586: Insufficient Session Expiration
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism...
CVE-2026-71177: Improper Restriction of Rendered UI Layers or Frames
Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session...
PT-2026-97333
Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description Insufficient Session Expiration allows a low privileged attacker with adjacent network access to potentially achieve elevation of privileges, bypass...
PT-2026-105053
RabbitMQ is a messaging and streaming broker. Prior to versions 3.13.15, 4.0.20, 4.1.11, 4.2.6, and 4.3.1, is authorized/2 for the /federation-links/.../restart route uses is authorized monitor accepts the monitoring tag, while allowed methods permits DELETE and delete resource/2 triggers rabbit...
The vulnerability in the web interface of the Cisco Identity Services Engine (ISE) management platform allows a perpetrator to execute arbitrary code and elevate their privileges to the root level.
The vulnerability in the web interface of the Cisco Identity Services Engine ISE management platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and elevate their privileges to the root leve...
CVE-2026-49811
A flaw was found in Dell Command | Monitor. A low privileged attacker with local access could potentially exploit an incorrect permission assignment for a critical resource. This could lead to an elevation of privileges, allowing the attacker to gain higher system permissions...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: qt (UTSA-2025-002300)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-002300 advisory. Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable elevation of privilege via local...
PT-2026-96983
Name of the Vulnerable Software and Affected Versions Adobe Connect versions prior to 12.12 Description Adobe Connect contains an SQL Injection flaw, which occurs when special elements used in an SQL command are not properly neutralized. This allows a low-privileged attacker to execute arbitrary...
RockyLinux 9 : .NET 9.0 (RLSA-2026:67614)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67614 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000009)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000009 advisory. A vulnerability was found in X.Org. This security flaw occurs because the handler for the XIChangeProperty request has a length-validation issues, resulting in...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: xorg-x11-server (UTSA-2023-000014)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2023-000014 advisory. A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory, resulting in out-of-bounds...
RockyLinux 10 : .NET 10.0 (RLSA-2026:67530)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67530 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...
RockyLinux 10 : .NET 9.0 (RLSA-2026:67528)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67528 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...
RockyLinux 9 : .NET 10.0 (RLSA-2026:67613)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:67613 advisory. dotnet10.0: dotnet9.0: dotnet8.0: .NET Information Disclosure Vulnerability CVE-2026-58649 dotnet10.0: dotnet9.0: .NET Elevation of Privilege...
CVE-2026-49811
Dell Command | Monitor DCM, versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
CVE-2026-49811
Dell Command | Monitor DCM, versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...
EUVD-2026-84105
Dell Command | Monitor DCM, versions prior to 10.13.2, contain an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...