Seven Bolt-Ons to Make Your Entra ID More Secure for Critical Sessions

Identity security is all the rage right now, and rightfully so. Securing identities that access an organization's resources is a sound security model. But IDs have their limits, and there are many use cases when a business should add other layers of security to a strong identity. And this is what...

CVE-2024-46624

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an unspecified vulnerability that stems from incorrect input validation and could lead to local elevation of privilege. No details of the vulnerability are provided at this time...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from an incorrect Modem boundary check, which could lead to elevation of privilege...

Progress Software WhatsUp Gold 安全漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold versions prior to...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor allows attackers to exploit it to increase their privileges. This vulnerability stems from insufficient validation of input data.

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

CVE-2024-49038

Improper neutralization of input during web page generation 'Cross-site Scripting' in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network...

CVE-2024-49052

CVE-2024-49052 is a Microsoft Azure PolicyWatch elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a network-based attacker to raise privileges without user interaction. Connected sources corroborate a network-exposed, high-severity issue (C...

CVE-2024-49035

The CVE-2024-49035 issue affects Partner.Microsoft.com (Microsoft Partner Center) and is caused by improper access control, enabling an unauthenticated attacker to elevate privileges over a network. Public metrics show a critical risk (CVSS v3.1: base score up to 9.8; NETWORK attack vector; privi...

Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network...

Microsoft Azure PolicyWatch 访问控制错误漏洞

Microsoft Azure PolicyWatch is an application from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure PolicyWatch that stems from a lack of authentication for critical functions, allowing an unauthorized attacker to elevate privileges through the network...

Avast Cleanup 后置链接漏洞

Avast Cleanup is a computer cleaning software from Avast. Avast Cleanup suffers from a back-link vulnerability that stems from the presence of a local elevation of privilege issue that could allow an attacker to elevate privileges and execute arbitrary code on an affected installation...

Avast Free Antivirus 后置链接漏洞

Avast Free Antivirus is a suite of free antivirus software from the Czech company Avast. A backlink vulnerability exists in Avast Free Antivirus that stems from a local elevation of privilege issue that could allow an attacker to elevate privileges on an affected installation and execute arbitrar...

WordPress plugin deco.Agencyde 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control...

CVE-2017-13315

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

Google Android 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. An attacker can exploit this...

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo v 5.17, which stems from a mediapool feature that is vulnerable to cross-site scripting attacks and allows remote attackers to elevate privileges...

CVE-2022-20871

A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance WSA, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient...

Defense-in-Depth Security Updates for Microsoft SharePoint Server 2016 (November 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211461;...

Google Android elevation of privilege vulnerability (CNVD-2024-49502)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...