5260 matches found
Intel NUC Integer Overflow Vulnerability
The Intel NUC 8 Mainstream Game Kit, among others, is a small desktop computer from Intel Corporation USA. An integer overflow vulnerability exists in the firmware of the Intel NUC, which can be exploited by a local attacker to elevate privileges...
Kyrol Internet Security Invalid Pointer Vulnerability
Kyrol Internet Security is an antivirus product from Malaysia. An invalid pointer vulnerability exists in the IOCTL handling of the kyrld.sys driver in Kyrol Internet Security 9.0.6.9, which stems from the fact that the use of 0x9C402405 with METHODNEITHER results in the reading of the original...
Veracrypt has an unspecified vulnerability
Veracrypt is a disk encryption program based on TrueCrypt. A security vulnerability exists in VeraCrypt version 1.24. An attacker can exploit the vulnerability to elevate privileges...
CVE-2019-19248
Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...
CVE-2019-19248
Electronic Arts Origin through 10.5.x allows Elevation of Privilege issue 2 of 2...
Ubuntu: Security Advisory (USN-4183-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
KB4530681: Windows 10 December 2019 Security Update
The remote Windows host is missing security update 4530681. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists when Microsoft Windows OLE fails to properly validate user input. An attacker could exploit the vulnerability to execute malicious...
EulerOS 2.0 SP5 : kernel (EulerOS-SA-2019-2531)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The powermateprobe function in drivers/input/misc/powermate.c in the Linux kernel before 4.5.1 allows physically proximate attackers to cause a...
Intel Active Management Technology Cross-Site Scripting Vulnerability
Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. A cross-site scripting vulnerability exists in Intel Active Management Technology. An attacker could exploit this vulnerability to elevate privileges...
CVE-2019-17437
An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9....
Authentication flaw
An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9....
Google Android System Elevation of Privilege Vulnerability (CNVD-2019-44274)
Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. System is one of the system components. A security vulnerability exists in System in Google Android version 10. The vulnerability can be exploited by an attacker to elevate privileges...
The vulnerability of Google Chrome, related to privilege management errors, allows a perpetrator to elevate their privileges.
The vulnerability of Google Chrome relates to privilege management errors. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created extension...
Design/Logic Flaw
Cloudera Manager 5.8.x before 5.8.5, 5.9.x before 5.9.2, and 5.10.x before 5.10.1 allows a read-only Cloudera Manager user to discover the usernames of other users and elevate the privileges of those users...
CVE-2019-15960
CVE-2019-15960 is a Cisco Webex Meetings privilege-escalation vulnerability affecting the Webex Network Recording Admin page. The issue arises from insufficient access-control validation, allowing an authenticated, low-privilege administrator to exploit a crafted URL request to gain privileged ac...
CVE-2012-6639
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
CVE-2012-6639
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
CVE-2012-6639
An privilege elevation vulnerability exists in Cloud-init before 0.7.0 when requests to an untrusted system are submitted for EC2 instance data...
CVE-2012-6639
CVE-2012-6639 describes a privilege-elevation vulnerability in Cloud-init prior to 0.7.0. The issue occurs when requests to an untrusted system are made for EC2 instance data, allowing an attacker with network access to leverage low-privileged execution to gain higher privileges. The available co...
