CVE-2024-5913 PAN-OS: Improper Input Validation Vulnerability in PAN-OS

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges...

CVE-2024-5913

CVE-2024-5913 affects Palo Alto Networks PAN-OS. The issue is an improper input validation in PAN-OS software that enables an attacker with the ability to tamper with the physical file system to elevate privileges. The vulnerability is associated with a physical-access attack vector and has MEDIU...

Microsoft Windows Multiple Vulnerabilities (KB5040434, Blast-RADIUS)

This host is missing an important security update according to Microsoft KB5040434 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2024-7862 · Microsoft · Windows Dwm Core Library +3

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library versions prior to the fixed version Description: The issue is related to an elevation of privilege vulnerability in the Windows DWM Core Library, which can be exploited to allow an attacker to gain system-level...

Microsoft Windows Multiple Vulnerabilities (KB5040427, Blast-RADIUS)

This host is missing an important security update according to Microsoft KB5040427 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-38052 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38033 PowerShell Elevation of Privilege Vulnerability

...

CVE-2024-38054 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-23663

CVE-2024-23663 describes an improper access-control flaw in Fortinet FortiExtender, allowing an attacker to create users with elevated privileges via a crafted HTTP request. Affected FortiExtender versions span 4.1.1–4.1.9, 4.2.0–4.2.6, 5.3.2, 7.0.0–7.0.4, 7.2.0–7.2.4, and 7.4.0–7.4.2. Public dis...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework due to an error in a framework component that can be exploited by an attacker to gain elevated privileges on the system...

WatchGuard Mobile VPN Command Injection Vulnerability

WatchGuard Mobile VPN is a VPN application from US-based WatchGuard. A security vulnerability exists in WatchGuard Mobile VPN with SSL version 12.10 and earlier, which stems from the presence of a local elevation of privilege vulnerability that could allow an attacker to execute arbitrary command...

PT-2024-4982 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension versions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension for Windows, caused by incorrect linking before...

PT-2024-27946 · Ibm · Ibm System Management For I

Name of the Vulnerable Software and Affected Versions: IBM System Management for i versions 7.2 through 7.4 Description: The issue allows a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrat...

CVE-2024-35137

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413...

IBM MQ 安全漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An elevation of privilege vulnerability exists in IBM MQ, which can be exploited...

The vulnerability of the application for updating Google Updater allows a perpetrator to elevate their privileges.

The vulnerability of the application for updating Google Updater is related to data processing errors. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

PT-2025-2856 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient input validation in the Android operating system's Framework component. This could allow an attacker to elevate their privileges. Recommendations: At th...

WordPress plugin WishList Member X security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

The vulnerability of the Winlogon entry program in Windows operating systems allows attackers to elevate their privileges.

The vulnerability of the Winlogon entry program in Windows operating systems is related to overflow in the dynamic memory buffer. Exploiting this vulnerability can allow an attacker to enhance their privileges using specially created data...