PT-2020-4765 · Microsoft · Azure Sphere

Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to errors in privilege management within the Azure Sphere operating system. Exploitation of this issue may allow a remote attacker to elevate their privileges...

PT-2020-4772 · Microsoft · Office Access Connectivity Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Access Connectivity Engine affected versions not specified Description: The issue is related to errors in code generation management within the Microsoft Office Access Connectivity Engine component of the Microsoft Office...

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

CVE-2020-5658

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

CVE-2020-5658: Undefined Security Weakness

Resource Management Errors vulnerability in TCP/IP function included in the firmware of MELSEC iQ-R series RJ71EIP91 EtherNet/IP Network Interface Module First 2 digits of serial number are '02' or before, RJ71PN92 PROFINET IO Controller Module First 2 digits of serial number are '01' or before,...

Intel Computing Improvement Program Privilege Escalation

The vulnerability of the Intel Computing Improvement Program’s data collection tool is due to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel processor BIOS Resource Management Error

The vulnerability of Intel processor BIOS microprogramming software is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause malfunctions in the system’s operation...

Intel processor BIOS Privilege Management Error

The vulnerability of Intel processor BIOS microprogramming software is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

USN-4587-1 italc vulnerabilities

Nicolas Ruff discovered that iTALC had buffer overflows, divide-by-zero errors and didn't check malloc return values. A remote attacker could use these issues to cause a denial of service or possibly execute arbitrary code. CVE-2014-6051, CVE-2014-6052, CVE-2014-6053, CVE-2014-6054, CVE-2014-6055...

Windows Privilege Escalation

The vulnerability of the Windows operating system’s function detection service is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...

mod_dav_svn svnserve DoS

The vulnerability of server processes moddavsvn and svnserve in a centralized version control system like Subversion is related to resource management errors. Exploiting this vulnerability allows an attacker to cause service failures when processing parameter combinations that depend on revision...

fdSSDP.dll Privilege Escalation

The vulnerability of the fdSSDP.dll library on Windows operating systems is related to privilege management errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

PT-2020-5181

Name of the Vulnerable Software and Affected Versions Cisco Data Center Network Manager affected versions not specified Description The vulnerability in the web interface of Cisco Data Center Network Manager is related to privilege management errors. It may allow a remote attacker to gain access ...

MpSigStub.exe File Deletion

The vulnerability of the MpSigStub.exe executable file of Microsoft’s Windows Defender is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor to delete files in certain parts of the file system remotely...

SD-WAN vEdge DoS

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in state management errors. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Mitsubishi Electric GOT2000 Series

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Mitsubishi Electric Equipment: GOT2000 Series Vulnerabilities: Improper Restriction of Operations within the Bounds of a Memory Buffer, Session Fixation, NULL Pointer Dereference, Improper Access...

Installation Manager IBM consoleinst.sh Data Compromise

The vulnerability of the consoleinst.sh component of the Installation Manager IBM is related to privilege management errors. Exploiting this vulnerability could allow an attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity...

PDF Viewing Privilege Management Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...

PDF Viewing Privilege Management Code Execution

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2015/Reader 2015 are related to privilege management errors. Exploiting these vulnerabilities can all...

Wireshark Packet-IEEE802.11 Component DoS

The vulnerability of the epan/dissectors/packet-ieee80211.c component of the Wireshark network traffic analyzer is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...