Windows Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Windows that allows a sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on an affected system. This vulnerability by itself does not allow arbitrary code execution. However,...

Netgate Registry Clenaner Local Elevation of Privilege Vulnerability

NETGATE Registry Cleaner is a disk cleaner. A local elevation of privilege vulnerability exists in Netgate Registry Clenaner, which can be exploited by an attacker to elevate privileges...

KB4457138: Windows 10 Version 1703 September 2018 Security Update

The remote Windows host is missing security update 4457138. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way...

KLA11890 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Support Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in...

KLA11316 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, gain privileges, cause denial of service, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. An informati...

Making Expect scripts for SSH Authentication and Privilege Elevation

Expect can help you to automate interactive console applications. For example, expect script can go to some Linux host via SSH with password authentication, make additional authentication procedures su, sudo to elevate privileges and execute some commands. Like Vulnerability and Compliance...

Cisco Data Center Network Manager Elevation of Privilege Vulnerability

Cisco Data Center Network Manager DCNM is the management system for Cisco Unified Fabric. An elevation of privilege vulnerability exists in the web interface of Cisco Data Center Network Manager. The vulnerability stems from incomplete input validation of user input in HTTP requests. An attacker...

Design/Logic Flaw

The /etc/init.d/opsview-reporting-module script that runs at boot time in Opsview Monitor before 5.3.1 and 5.4.x before 5.4.2 invokes a file that can be edited by the nagios user, and would allow attackers to elevate their privileges to root after a system restart, hence obtaining full control of...

Google Android Media Framework elevation of privilege vulnerability (CNVD-2018-22770)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Media Framework component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9, which can be exploited by an attacke...

Linux kernel elevation of privilege vulnerability (CNVD-2018-19417)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An elevation of privilege vulnerability exists in the yurexread file in drivers/usb/misc/yurex.c in versions of the Linux kernel prior to 4.17.7, which can be exploite...

Microsoft Windows ALPC Task Scheduler Local Privilege Elevation

On vulnerable versions of Windows the alpc endpoint method SchRpcSetSecurity implemented by the task scheduler service can be used to write arbitrary DACLs to .job files located in c:\windows\tasks because the scheduler does not use impersonation when checking this location. Since users can creat...

CVE-2018-8400

An elevation of privilege vulnerability exists when the DirectX Graphics Kernel DXGKRNL driver improperly handles objects in memory, aka "DirectX Graphics Kernel Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10. This CVE ID is unique from CVE-2018-8401,...

CVE-2018-8357

An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet Explorer 11, Microsoft Edge...

CVE-2018-8404

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows Server...

CVE-2018-8412

An elevation of privilege vulnerability exists when the Microsoft AutoUpdate MAU application for Mac improperly validates updates before executing them, aka "Microsoft MAU Office Elevation of Privilege Vulnerability." This affects Microsoft Office...

Intel Smart Sound Technology Driver Module Elevation of Privilege Vulnerability (CNVD-2018-15605)

Intel Smart Sound Technology is an integrated audio DSP Digital Signal Processor from Intel USA, which is mainly used to process audio, support voice interaction and so on. An elevation of privilege vulnerability exists in the driver module in versions prior to Intel Smart Sound Technology...

KLA11306 Multiple vulnerabilities in Microsoft Browsers

Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. A memory...

Intel Smart Sound Technology Driver Module Elevation of Privilege Vulnerability

Intel Smart Sound Technology is an integrated audio DSP Digital Signal Processor from Intel USA, which is mainly used to process audio, support voice interaction and so on. An elevation of privilege vulnerability exists in the driver module in versions prior to Intel Smart Sound Technology...

cobbler elevation of privilege vulnerability

Cobbler is a Linux installation server that allows you to quickly set up a network installation environment. An elevation of privilege vulnerability exists in cobbler 2.6.x. The vulnerability stems from the fact that cobbler exposes all functions of the CobblerXMLRPCInterface class via XMLRPC. A...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Rational Developer for i, Rational Developer for AIX and Linux, Rational Developer for Power Systems Software

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 7, and 8 that are used by Rational Developer for i, Rational Developer for AIX and Linux, Rational Developer for Power Systems Software CVE-2016-0363, CVE-2016-0376. These issues were disclosed as part of th...