CVE-2024-40781

CVE-2024-40781 is an Apple macOS local privilege escalation fixed by updated checks in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The connected documents note that a local attacker could elevate privileges due to these checks, but do not provide additional technical detai...

Comodo Internet Security Pro 安全漏洞

Comodo Internet Security Pro is an Internet security suite from Comodo, USA. A security vulnerability exists in Comodo Internet Security Pro that stems from a link-tracking local elevation of privilege vulnerability in the cmdagent executable. An attacker can exploit this vulnerability to elevate...

Lenovo XClarity Controller 安全漏洞

Lenovo XClarity Controller Lenovo XCC is a server-embedded management engine from Lenovo China that is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller. An attacker can exploit the vulnerability to elevate privileges...

Absolute Secure Access 安全漏洞

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.07 that stems from an elevation of privilege vulnerability in the server a...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei HarmonyOS is an operating system... An elevation of privilege vulnerability exists in Huawei EMUI and Huawei HarmonyOS, which stems from improper...

PT-2024-29123 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.07 Description: The issue is related to an elevation of privilege vulnerability in server and client components. Attackers with local access and valid desktop user credentials can elevate their...

CVE-2024-38164

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...

CVE-2024-38176

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

CVE-2024-38164

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...

CVE-2024-38176

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

CVE-2024-38164

The CVE-2024-38164 entry concerns an improper access control in GroupMe that could allow an unauthenticated attacker, by convincing a user to click a malicious link, to escalate privileges over the network. Affected product: GroupMe (GroupMe mobile/app context implied). Vulnerable component/conte...

CVE-2024-38164 GroupMe Elevation of Privilege Vulnerability

...

GroupMe Elevation of Privilege Vulnerability

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

Zyxel WBE660S 安全漏洞

The Zyxel WBE660S is a wireless access point from China Hopkins Zyxel. A security vulnerability exists in the Zyxel WBE660S that stems from an incorrect privilege management vulnerability that could allow an authenticated user to elevate privileges and download configuration files on vulnerable...

CVE-2024-30473

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...

CVE-2024-30473

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...

CVE-2024-30473

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...

CVE-2024-30473

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...

CVE-2024-30473

Dell EMC Elastic Cloud Storage (ECS) is affected by a privilege-elevation vulnerability in the user management component for versions prior to 3.8.1. According to multiple sources, a remote attacker with high privileges could potentially exploit this flaw to access unauthorized endpoints. The lik...

CVE-2024-5913 PAN-OS: Improper Input Validation Vulnerability in PAN-OS

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges...