Microsoft Windows Local Security Authority (LSA) 安全漏洞

Microsoft Windows Local Security Authority LSA is an internal program of Microsoft Corporation USA that runs Windows system security policies. An elevation of privilege vulnerability exists in the Microsoft Windows Local Security Authority LSA, which stems from improper privilege assignment in th...

Microsoft Windows Workstation Service 安全漏洞

Microsoft Windows Workstation is an application from Microsoft Corporation USA. It handles advanced workloads with the help of server-level data protection and performance.Microsoft Windows Workstation Service has an elevation of privilege vulnerability, which stems from the existence of improper...

Microsoft Windows Resilient File System (ReFS) 安全漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows Resilient File System ReFS, which stems from an improper assignment of privileges in an application. An attacker could exploit...

Microsoft Windows Storage 竞争条件问题漏洞

Microsoft Windows Storage is an elevation of privilege vulnerability in Microsoft Windows Storage, which results from the improper assignment of privileges to applications and can be exploited by attackers to cause an elevation of privilege...

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in the Microsoft Windows COM Event System Service, which stems from improper privilege assignment in applications and can be exploited by attackers to...

Microsoft Graphics Component 安全漏洞

Microsoft Graphics Component is a graphics driver component of Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Graphics Component, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause an elevation of...

Microsoft Windows Win32K 安全漏洞

Microsoft Windows Win32k is a system file for Windows multi-user management from Microsoft Corporation USA.Microsoft Windows Win32K has an elevation of privilege vulnerability, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause an...

Microsoft Windows Print Spooler Components 安全漏洞

Print Spooler is a print background processing service that manages all local and network print queues and controls all print jobs.An elevation of privilege vulnerability exists in Microsoft Windows Print Spooler, which stems from improper privilege assignment in the application and can be...

Microsoft Windows WLAN Service 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows WLAN Service, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause an...

Microsoft Windows Kernel 安全漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows Kernel, which stems from improper privilege assignment in applications and can be exploited by attackers to cause an elevation ...

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization, Microsoft Windows Hyper-V has an elevation of privilege vulnerability that stems from improper privilege assignment in the application and...

CVE-2022-3422: Improper Privilege Management

Account Takeover :: when see the info i can see the hash pass i can creaked it ............... Account Takeover :: when see the info i can see the forgotpasswordtoken the hacker can send the request and changed the pass...

CVE-2022-2975: Improper Privilege Management

A vulnerability related to weak permissions was detected in Avaya Aura Application Enablement Services web application, allowing an administrative user to modify accounts leading to execution of arbitrary code as the root user. This issue affects Application Enablement Services versions 8.0.0.0...

Hitachi Energy MicroSCADA Pro X SYS600

1. EXECUTIVE SUMMARY CVSS v3 8.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi Energy Equipment: MicroSCADA Pro/X SYS600 Vulnerability: Improper Input Validation, Improper Privilege Management, Improper Access Control, Improper Handling of Unexpected Data Type. 2. RISK...

Rocket.Chat Elevation of Privilege Vulnerability

Rocket.Chat is an open source team chat software. Chat suffers from an elevation of privilege vulnerability that stems from improper privilege management in the application, which can be exploited by any authenticated attacker to gain elevated privileges to view direct messages without proper...

Rocket.Chat 安全漏洞

Rocket.Chat is an open source team chat software. Chat suffers from an elevation of privilege vulnerability that stems from improper privilege management in the application, which can be exploited by any authenticated attacker to gain elevated privileges to view direct messages without proper...

CVE-2022-30121: Improper Privilege Management

The “LANDeskR Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system...

CVE-2022-32781: Improper Privilege Management

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4, iOS 15.5 and iPadOS 15.5, Security Update 2022-005 Catalina, macOS Big Sur 11.6.8. An app with root privileges may be able to access private information...

CVE-2022-32826: Improper Privilege Management

An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges...

CVE-2022-32782: Improper Privilege Management

This issue was addressed by enabling hardened runtime. This issue is fixed in macOS Monterey 12.4. An app with root privileges may be able to access private information...