GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14338)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.9 - 12.7.2 suffers from an insecure privilege...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14342)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 12.2 suffers from an insecure privilege...

The vulnerability of the Intel VTune Amplifier software for analyzing software performance lies in its insecure handling of privileges. This allows attackers to escalate their privileges.

The vulnerability of the Intel VTune Amplifier software analysis tool relates to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of SAP NetWeaver Java Application Server web applications, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of SAP NetWeaver Java Application Server web applications is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of Windows Media Services on Windows operating systems allows attackers to increase their privileges.

The vulnerability of Windows Media Services on Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Norton App Lock tool, related to insecure management of privileges, allows a violator to gain unauthorized access to the device.

The vulnerability of the Norton App Lock utility is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious individual to gain unauthorized access to the device...

The vulnerability of the Intel Easy Streaming Wizard’s data streaming program lies in its insecure handling of privileges, allowing attackers to escalate their privileges.

The vulnerability of the Intel Easy Streaming Wizard data transfer process is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2020-1558 · Apache +1 · Apache +1

Name of the Vulnerable Software and Affected Versions: rConfig version 3.9.3 Description: An issue in rConfig allows an attacker to bypass local security restrictions due to insecure privilege management in the /etc/sudoers file. This occurs after an update to the rConfig specific Apache...

GitLab EE Insecure Privilege Vulnerability

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. An insecure privilege vulnerability exists in GitLab EE 8.2 ...

The vulnerability of the driver ilp60x64.sys in Intel Ethernet controllers of the 700 series allows attackers to gain increased privileges.

The vulnerability of the ilp60x64.sys driver for Intel Ethernet Series 700 controllers is related to insecure privilege management. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Apache Hadoop distributed development and execution platform, related to insecure privilege management, allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the Apache Hadoop distributed development and execution platform is related to insecure privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root privileges remotely...

PT-2019-5776

Name of the Vulnerable Software and Affected Versions SchedMD Slurm versions prior to 18.08.9 SchedMD Slurm versions 19.x prior to 19.05.5 Description The issue is related to the srun --uid command in the SLURM resource management system, which is associated with insecure privilege management...

PT-2019-4526

Name of the Vulnerable Software and Affected Versions Linux Administrative Tools for IntelR Network Adapters versions prior to 24.3 Description The issue is related to insufficient memory protection, which may allow an authenticated user to potentially enable escalation of privilege via local...

The vulnerability of the Windows Graphics component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Graphics component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 allows attackers to enhance their privileges.

The vulnerability of the Click-to-Run components of Microsoft Office and Office 365 relates to insecure management of privileges. Exploiting this vulnerability can allow a remote attacker to enhance their privileges using a specially crafted file...

The vulnerability of the Win32k component in Windows operating systems, which allows attackers to escalate their privileges

Vulnerability of the Win32k component in Windows operating systems with insecure privilege management. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

The vulnerability of the Windows Graphics component of the operating system allows attackers to enhance their privileges.

The vulnerability of the Windows Graphics component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created application...

Scanguard Insecure Privilege Vulnerability

Scanguard is a computer protection software. Scanguard suffers from an insecure privilege vulnerability that can be exploited by an attacker to elevate privileges...

PT-2019-3899 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Win32k component of Windows operating systems, which is caused by insecure privilege management. This...

PT-2019-4267

Name of the Vulnerable Software and Affected Versions Intel Ethernet 700 Series Controllers versions prior to 7.0 Description The issue is related to insufficient access control in the firmware, which may allow a privileged user to potentially enable an escalation of privilege, denial of service,...