Lucene search
K

148 matches found

NVD
NVD
added 2026/05/13 4:16 p.m.5 views

CVE-2026-32673

A vulnerability exists in BIG-IP scripted monitors that may allow an authenticated attacker with the Resource Administrator or Administrator role to execute arbitrary system commands with higher privileges. In appliance mode deployments, a successful exploit can allow the attacker to cross a...

8.7CVSS0.00235EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/13 12:0 a.m.5 views

PT-2026-40636

Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.1.3.2 F5 BIG-IP versions prior to 17.5.1.6 F5 BIG-IP versions prior to 21.0.0.2 Description An issue in scripted monitors allows an authenticated attacker with the Resource Administrator or Administrator role to...

8.7CVSS5.8AI score0.00235EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.4 views

Microsoft Office ClickToRun 访问控制错误漏洞

Microsoft Office ClickToRun is a component developed by Microsoft that allows for the download and installation of Microsoft Office products. There is an access control error vulnerability present in Microsoft Office ClickToRun. Attackers can exploit this vulnerability to gain higher privileges...

8.8CVSS5.8AI score0.00212EPSS
Exploits0References2
NVD
NVD
added 2026/05/09 3:16 a.m.30 views

CVE-2026-8207

Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874adece5d2dc7e408e9aa2d1abadb/modules/Tracking/graphing.phpL145 feature. Successful exploitation requires Teacher or high...

7CVSS0.00226EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/02/10 12:0 a.m.5 views

PT-2026-7412

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to February 2026 Patch Tuesday updates Description An issue exists in Microsoft Windows Remote Desktop Services due to improper privilege management. This allows an authorized attacker to elevate privileges,...

7.8CVSS6.1AI score0.03846EPSS
Exploits5References57
RedhatCVE
RedhatCVE
added 2026/01/09 9:8 a.m.5 views

CVE-2020-7316

Unquoted service path vulnerability in McAfee File and Removable Media Protection FRP prior to 5.3.0 allows local users to execute arbitrary code, with higher privileges, via execution and from a compromised folder. This issue may result in files not being encrypted when a policy is triggered...

7.8CVSS7.3AI score0.00369EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/12/06 4:45 p.m.5 views

CVE-2024-9183

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1 that could have allowed an authenticated user to obtain credentials from higher-privileged users and perform actions in their context under specific...

7.7CVSS6.7AI score0.0021EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/05 4:34 p.m.26 views

CVE-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1 that could have allowed an authenticated user to obtain credentials from higher-privileged users and perform actions in their context under specific...

7.7CVSS0.0021EPSS
Exploits0References3
OSV
OSV
added 2025/12/05 4:34 p.m.1 views

CVE-2024-9183 Time-of-check Time-of-use (TOCTOU) Race Condition in GitLab

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 prior to 18.4.5, 18.5 prior to 18.5.3, and 18.6 prior to 18.6.1 that could have allowed an authenticated user to obtain credentials from higher-privileged users and perform actions in their context under specific...

7.7CVSS6.7AI score0.0021EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-1999-1394

Malware in sbrugna...

4.6CVSS6.4AI score0.00724EPSS
Exploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2001-0452

Malware in sbrugna...

7.5CVSS6.3AI score0.05882EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-31097

Malicious code in bioql PyPI...

8.8CVSS6.6AI score0.00269EPSS
Exploits0References2
OSV
OSV
added 2025/09/25 3:16 p.m.0 views

CVE-2025-40837

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended...

8.8CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/09/25 2:52 p.m.5 views

CVE-2025-40837 Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended...

8.7CVSS0.00269EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/09/25 2:52 p.m.2 views

CVE-2025-40837 Ericsson Indoor Connect 8855 - Missing Authorization Vulnerability

Ericsson Indoor Connect 8855 contains a missing authorization vulnerability which if exploited can allow access to the system as a user with higher privileges than intended...

8.7CVSS6.3AI score0.00269EPSS
Exploits0References1
CNVD
CNVD
added 2025/09/08 12:0 a.m.5 views

Google Android elevation of privilege vulnerability (CNVD-2025-23035)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher privileges on the system...

3.2CVSS7.4AI score0.00101EPSS
Exploits0References1
CNVD
CNVD
added 2025/08/28 12:0 a.m.2 views

Google Android elevation of privilege vulnerability (CNVD-2025-19993)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher privileges on the system...

8CVSS7.4AI score0.00186EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/26 12:0 a.m.2 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain higher privileges on the system...

8CVSS7.2AI score0.00186EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2025/06/19 3:37 a.m.3 views

SUSE CVE-2023-32210

Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstances it might have been possible to cause a document to be loaded with a higher privileged principal than intended. This vulnerability...

6.5CVSS8.3AI score0.00538EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/23 10:36 a.m.5 views

CVE-2024-47045

Privilege chaining issue exists in the installer of e-Tax softwarecommon program. If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege...

7.8CVSS6.9AI score0.00149EPSS
Exploits0
Rows per page
Query Builder