37632 matches found
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2025-23055)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability that is caused by improper input validation. An attacker could exploit the vulnerability to gain elevate...
WordPress plugin CF7 7 Mailchimp Add-on 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...
Mattermost Elevation of Privilege Vulnerability
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an elevation of privilege vulnerability that stems from insufficient validation of channel member management privileges, which can be exploited by an attacker to cause...
Multiple Advantech Product File Upload Vulnerabilities
The Advantech WISE-4010LAN, WISE-4050LAN, and WISE-4060LAN are all industrial automation controllers from Advantech of Taiwan, China. A file upload vulnerability exists in multiple Advantech products, which can be exploited by attackers to cause a backdoor installation or elevation of privilege...
WordPress plugin Red Art 代码问题漏洞
WordPress Red Art is a theme designed for the art field, mainly used to create artist portfolios, galleries, photography exhibitions, tattoo studios and other art websites. WordPress Red Art suffers from a code injection vulnerability that stems from deserializing untrustworthy data, which can be...
Exploit for Inclusion of Functionality from Untrusted Control Sphere in Sudo_Project Sudo
CVE-2025-32463 Sudo chroot Elevation of Privil...
BIT-ASPNET-CORE-2025-24070 ASP.NET Core and Visual Studio Elevation of Privilege Vulnerability
Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network...
BIT-AZURE-CLI-2024-43591 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability
Azure Command Line Integration CLI Elevation of Privilege Vulnerability...
ASNA Assist和ASNA Registrar 安全漏洞
ASNA Assist and ASNA Registrar are both products of ASNA Corporation.ASNA Assist is a software for managing authentication license keys.ASNA Registrar is a software for registering ASNA products. A security vulnerability exists in ASNA Assist and ASNA Registrar versions prior to 2025-03-31, which...
Infinera G42 安全漏洞
Infinera G42 is a modular platform for optical networks from Infinera USA. A security vulnerability exists in Infinera G42 version R6.1.3, which stems from a misconfiguration and could lead to information disclosure and elevation of privilege...
NSClient++ 安全漏洞
NSClient++ is an NSClient open source monitoring agent program for Windows systems. A security vulnerability exists in NSClient++ version 0.5.2.35, which stems from an insecure configuration that could lead to elevation of privilege...
Honor PC Manager 安全漏洞
Honor PC Manager is a management software developed by the Chinese company Honor Honor specifically for its computer products such as laptops. A security vulnerability exists in Honor PC Manager version 16.0.0.118, which stems from a misconfiguration of the security properties of the named condui...
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from an elevation of privilege vulnerability that stems from insufficient validation of channel member management privileges, which can be exploited by an attacker to cause...
Dell PowerScale OneFS Elevation of Privilege Vulnerability
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 due to a lack of authorization in NFS exports. An attack...
CVE-2025-37101
CVE-2025-37101 concerns HPE OneView for VMware vCenter (OV4VC). The available documents confirm a vulnerability where an attacker with read-only privileges can perform vertical privilege escalation, enabling admin actions. The CVSS 3.1 score is 8.7 (HIGH): attack vector NETWORK, attack complexity...
CVE-2025-32976
Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...
Microsoft Edge 输入验证错误漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability that is caused by improper input validation. An attacker could exploit the vulnerability to gain elevate...
FreeBSD : Gitlab -- Vulnerabilities (d45dabd9-5232-11f0-9ca4-2cf05da270f3)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d45dabd9-5232-11f0-9ca4-2cf05da270f3 advisory. Gitlab reports: Denial of Service impacts GitLab CE/EE Missing Authentication issue impacts...
Autel MaxiCharger AC Wallbox Commercial 安全漏洞
Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. An elevation of privilege vulnerability exists in Autel MaxiCharger AC Wallbox Commercial, which can be exploited by an attacker to escalate privileges to normally user-protected resources...