CVE-2025-37101

CVE-2025-37101 concerns HPE OneView for VMware vCenter (OV4VC). The available documents confirm a vulnerability where an attacker with read-only privileges can perform vertical privilege escalation, enabling admin actions. The CVSS 3.1 score is 8.7 (HIGH): attack vector NETWORK, attack complexity...

CVE-2025-32976

Quest KACE Systems Management Appliance SMA 13.0.x before 13.0.385, 13.1.x before 13.1.81, 13.2.x before 13.2.183, 14.0.x before 14.0.341 Patch 5, and 14.1.x before 14.1.101 Patch 4 contains a logic flaw in its two-factor authentication implementation that allows authenticated users to bypass...

Microsoft Edge 输入验证错误漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an elevation of privilege vulnerability that is caused by improper input validation. An attacker could exploit the vulnerability to gain elevate...

FreeBSD : Gitlab -- Vulnerabilities (d45dabd9-5232-11f0-9ca4-2cf05da270f3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the d45dabd9-5232-11f0-9ca4-2cf05da270f3 advisory. Gitlab reports: Denial of Service impacts GitLab CE/EE Missing Authentication issue impacts...

Autel MaxiCharger AC Wallbox Commercial 安全漏洞

Autel MaxiCharger AC Wallbox Commercial is a smart AI electric car charger from Autel USA. An elevation of privilege vulnerability exists in Autel MaxiCharger AC Wallbox Commercial, which can be exploited by an attacker to escalate privileges to normally user-protected resources...

Gitlab -- Vulnerabilities

Gitlab reports: Denial of Service impacts GitLab CE/EE Missing Authentication issue impacts GitLab CE/EE Improper access control issue impacts GitLab CE/EE Elevation of Privilege impacts GitLab CE/EE Improper access control issue impacts GitLab EE...

HPESBGN04876 rev.2 - HPE OneView for VMware vCenter (OV4VC) and Compute Ops Management plug-in for VMware vCenter (COM4VC), Local Elevation of of Privilege

Potential Security Impact: Local: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight - All versions prior to v11.7 HPE Compute Ops Management - All versions prior to v1.4 CVSS Scores: | CVE ...

CVE-2023-50450

An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges...

Apache CloudStack Elevation of Privilege Vulnerability

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack has a security vulnerability that can be exploited ...

Apache CloudStack elevation of privilege vulnerability (CNVD-2025-20874)

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack has a security vulnerability that can be exploited ...

Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 due to a lack of authorization in NFS exports. An attack...

Storaged libblockdev 安全漏洞

Storaged libblockdev is a Storaged open source library for manipulating block devices. A security vulnerability exists in Storaged libblockdev that stems from interacting with the udisks daemon in an improper manner, which could lead to local elevation of privilege...

Versa Director 安全漏洞

Versa Director is a virtualization and service creation platform from Versa USA. that simplifies the creation, automation and delivery of services using Versa FlexVNF. A security vulnerability exists in Versa Director that stems from abuse of the Webhook feature and could lead to elevation of...

Trend Micro Security 安全漏洞

Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from improper link following and could lead to local elevation of privilege...

Trend Micro Apex One 安全漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from a link-following issue that could lead to local elevation of privilege...

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from an uncontrolled search path that could lead to local elevation of privilege...

WordPress CryptoCloud - Crypto Payment Gateway plugin elevation of privilege vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An elevation of privilege vulnerability exists in the WordPress CryptoCloud - Crypto Payment Gateway plugin, which stems from improperly configured access control, for which no...

Trend Micro Apex One Damage Cleanup Engine 安全漏洞

Trend Micro Apex One Damage Cleanup Engine is a malware scanning engine from Trend Micro. A security vulnerability exists in Trend Micro Apex One Damage Cleanup Engine, which stems from a link following issue that could lead to local elevation of privilege...

Elevation of Privilege Vulnerability in Various ABB Products

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

TencentOS Server 4: dotnet7.0 (TSSA-2024:0679)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0679 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities...