37429 matches found
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64656 Azure Application Gateway Elevation of Privilege Vulnerability
...
CVE-2025-64656
CVE-2025-64656 affects Microsoft Azure Application Gateway. An out-of-bounds read allows an unauthenticated attacker to elevate privileges over the network. Affected versions for Application Gateway are 9.4–9.8; the provided sources recommend updating to a fixed version, but no specific patched v...
OneUptime 访问控制错误漏洞
OneUptime is a comprehensive solution from OneUptime Open Source. for monitoring and managing your online services. An Access Control Error vulnerability exists in versions prior to OneUptime 8.0.5567 that stems from login response manipulation and could lead to elevation of privilege...
Ruoyi 安全漏洞
Ruoyi is a backend management system for Ruoyi Individual Developers. A security vulnerability exists in Ruoyi version 4.8.1, which stems from a departmental privilege being higher than an active user's privilege, which may result in elevated privileges...
MegaTec ClientMate 安全漏洞
MegaTec ClientMate is a power management software from MegaTec Taiwan, China. A security vulnerability exists in MegaTec ClientMate that stems from an unquoted service path that could lead to elevation of privilege...
MegaTec UPSilon2000 安全漏洞
MegaTec UPSilon2000 is an uninterruptible power supply UPS monitoring and control software from Taiwan, China-based MegaTec. A security vulnerability exists in MegaTec UPSilon2000 that stems from an unquoted service path that could lead to elevation of privilege...
youlai-boot 安全漏洞
youlai-boot is a privilege management system open-sourced by China youlaiorg. A security vulnerability exists in youlai-boot version v2.21.1, which stems from improper access control and may result in elevation of privilege...
NVIDIA DGX Spark 缓冲区错误漏洞
The NVIDIA DGX Spark is a personal AI computer from NVIDIA. A buffer error vulnerability exists in NVIDIA DGX Spark GB10, which stems from an out-of-bounds write in the SROOT firmware that could lead to code execution, data tampering, denial of service, or elevation of privilege...
WordPress plugin EduKart Pro 安全漏洞
WordPress EduKart Pro plugin is an e-commerce plugin for the WordPress platform that is primarily used to build and manage online stores. WordPress EduKart Pro plugin has an elevation of privilege vulnerability that stems from the edukartproregisteruserfrontend function not restricting user...
Primakon Pi Portal 安全漏洞
Primakon Pi Portal is a project, contract management platform from Primakon Croatia. A security vulnerability exists in Primakon Pi Portal version 1.0.18, which stems from insufficient authorization checking of API endpoints and could lead to unauthorized data manipulation and elevation of...
Visual Studio Tools for Applications Elevation of Privilege (CVE-2025-29803)
In VSTA 2019 prior 16.0.35907.0 and VSTA 2022 prior to 17.0.35906.0, the software contains a vulnerability CVE-2025-29803 that could allow remote or local attackers to execute arbitrary code or escalate privileges within the host application, potentially compromising systems that rely on VSTA for...
Microsoft Application Gateway Elevation of Privilege Vulnerability
Microsoft Application Gateway is an application gateway from Microsoft Corporation in the United States. An elevation of privilege vulnerability exists in Microsoft Application Gateway, which can be exploited by an attacker to elevate privileges...
AMD Xilinx Run Time 安全漏洞
AMD Xilinx Run Time is a standardized runtime environment developed by AMD for Xilinx FPGAs that provides a unified software interface to optimize FPGA arithmetic. An elevation of privilege vulnerability exists in AMD Xilinx Run Time that stems from insufficient authentication and can be exploite...
CVE-2025-62207
Azure Monitor Elevation of Privilege Vulnerability...
CVE-2025-49752
Azure Bastion Elevation of Privilege Vulnerability...
CVE-2025-59245
Microsoft SharePoint Online Elevation of Privilege Vulnerability...
EUVD-2025-198370
Azure Bastion Elevation of Privilege Vulnerability...