147 matches found
CVE-2017-5709
Multiple privilege escalations in kernel in Intel Server Platform Services Firmware 4.0 allows unauthorized process to access privileged content via unspecified vector...
CVE-2017-5709
CVE-2017-5709 corresponds to privilege-escalation flaws in Intel Server Platform Services Firmware 4.0. The Intel SPS kernel code could allow an unauthorized local process to access privileged content via an unspecified vector. The Huawei and CNVD entries confirm the same issue; MITRE/Intel advis...
CVE-2017-5708
CVE-2017-5708 involves privilege escalations in Intel Manageability Engine Firmware (ME) 11.0/11.5/11.6/11.7/11.10/11.20. An unauthorized process may access privileged content via an unspecified vector. Affected components: ME firmware (and related SPS/TXE stack per Intel-SA-00086). Impact is def...
CVE-2017-11783
CVE-2017-11783 is an Elevation of Privilege in Windows via ALPC/RPC handling. Public details in connected docs show the SvcMoveFileInheritSecurity method can be abused to impersonate a user and move a file, enabling arbitrary file creation and privilege escalation on Windows 10 v1709, attributed ...
Privilege Escalation
Moodle is vulnerable to privilege escalations. On big installations, when the sync script was run it would improperly assign a manager role to suspended student accounts, granting these accounts the same access rights as a manager role...
Schneider Electric Pelco VideoXpert Privilege Escalations
Summary VideoXpert is a video management solution designed for scalability, fitting the needs surveillance operations of any size. VideoXpert Ultimate can also aggregate other VideoXpert systems, tying multiple video management systems into a single interface. Description The application is...
The Stack Clash
What is the Stack Clash? The Stack Clash is a vulnerability in the memory management of several operating systems. It affects Linux, OpenBSD, NetBSD, FreeBSD and Solaris, on i386 and amd64. It can be exploited by attackers to corrupt memory and execute arbitrary code. Qualys researchers discovere...
HackerOne: javascript: and mailto: links are allowed in JIRA integration settings
Summary: For new feature settings, you accept website URLs like javascript:// or data:// in base urls. Even https://evil.com works, this needs to be stripped, this can be used to create another integrations without Steps To Reproduce 1. https://hackerone.com/Team/integrations/jira/edit 2. Try in...
Debian DLA-729-1 : tomcat7 security update
Multiple security vulnerabilities have been discovered in the Tomcat servlet and JSP engine, which may result in possible timing attacks to determine valid user names, bypass of the SecurityManager, disclosure of system properties, unrestricted access to global resources, arbitrary file overwrite...
[SECURITY] [DLA 729-1] tomcat7 security update
Package : tomcat7 Version : 7.0.28-4+deb7u7 CVE ID : CVE-2016-0762 CVE-2016-5018 CVE-2016-6794 CVE-2016-6796 CVE-2016-6797 CVE-2016-6816 CVE-2016-8735 Debian Bug : 841655 842662 842663 842664 842665 842666 845385 Multiple security vulnerabilities have been discovered in the Tomcat servlet and JSP...
DLA-729-1 tomcat7 - security update
Bulletin has no description...
Macro Expert 4.0 - Multiple Privilege Escalations
Exploit Title: Macro Expert 4.0 Multiple Elevation of Privilege Date: 26/09/2016 Exploit Author: Tulpa Contact: [email protected] Author website: www.tulpa-security.com Vendor Homepage: http://www.macro-expert.com/ Software Link: http://www.macro-expert.com/download.htm Version: Software...
Fortinet FortiClient multiple security vulnerabilities
Multiple privilege escalations...
Microsoft Windows multiple security vulnerabilities
Internet Explorer and VBScript multiple security vulnerabilities, RDP code execution, Hyper-V code execution, multiple privilege escalations...
Linux kernel security vulnerabilities
DoS, privilege escalations...
X.Org X server and video drivers multiple security vulnerabilities
Multiple memory corruptions and privilege escalations...
Oracle multiple security vulnerabilities
Multiple privilege escalations via built-in Java machine...
s3dvt multiple security vulnerabilities
Multiple privilege escalations...