37419 matches found
Wondershare Driver Install Service 代码问题漏洞
Wondershare Driver Install Service is an auxiliary background service program from China Wondershare. A code issue vulnerability exists in Wondershare Driver Install Service, which stems from an unquoted service path, and can be exploited by an attacker to cause an elevation of privilege...
PT-2026-4905
Name of the Vulnerable Software and Affected Versions Dell CloudBoost Virtual Appliance versions prior to 19.14.0.0 Description The Dell CloudBoost Virtual Appliance stores passwords in plaintext. A high privileged attacker with remote access could potentially exploit this, leading to elevation o...
EUVD-2020-30855
IObit Uninstaller 10 Pro contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted service path in the IObit Uninstaller Service to insert malicious code that would execute with...
PT-2026-4781
PDF Complete 3.5.310.2002 contains an unquoted service path vulnerability in its pdfsvc.exe service configuration. Attackers can exploit the unquoted path to inject and execute malicious code with elevated LocalSystem privileges...
CVE-2026-24305
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2026-24306
Improper access control in Azure Front Door AFD allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-1201
An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side request manipulation...
CVE-2021-47890
LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...
CVE-2021-47890
LogonExpert 8.1 contains an unquoted service path vulnerability in the LogonExpertSvc service running with LocalSystem privileges. Attackers can exploit the unquoted path to place malicious executables in intermediate directories, potentially gaining elevated system access during service startup...
CVE-2026-22273
Dell ECS, versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.2.0.0, contains an Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-24304
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network...
CVE-2026-24304
CVE-2026-24304 centers on an improper access control defect in Azure Resource Manager that can let an authorized attacker achieve privilege escalation over a network. The vulnerability is described as affecting Azure Resource Manager with an attacker able to escalate privileges without user inter...
CVE-2026-24304 Azure Resource Manager Elevation of Privilege Vulnerability
...
CVE-2026-24304 Azure Resource Manager Elevation of Privilege Vulnerability
...
EUVD-2026-4204
An Authorization Bypass Through User-Controlled Key vulnerability in Hubitat Elevation home automation controllers prior to version 2.4.2.157 could allow a remote authenticated user to control connected devices outside of their authorized scope via client-side request manipulation...
PT-2026-4514
Name of the Vulnerable Software and Affected Versions Epson USB Display version 1.6.0.0 Description The software contains an unquoted service path vulnerability within the EMP UDSA service, which operates with LocalSystem privileges. This allows attackers to potentially gain elevated system acces...
CVE-2026-24305
Azure Entra ID Elevation of Privilege Vulnerability...
CVE-2026-21227 Azure Logic Apps Elevation of Privilege Vulnerability
...
CVE-2026-21227
The CVE-2026-21227 entry describes a path traversal vulnerability in Azure Logic Apps: improper limitation of a pathname to a restricted directory that could allow an unauthenticated attacker to elevate privileges over a network. The root cause is stated as a pathname restriction flaw in Azure Lo...