CVE-2017-2632

A logic error in validrole in CloudForms role validation before 5.7.1.3 could allow a tenant administrator to create groups with a higher privilege level than the tenant administrator should have. This would allow an attacker with tenant administration access to elevate privileges...

Security Bulletin: Users of Helm with IBM Cloud Private can elevate their privileges (CVE-2018-1714)

Summary Users of Helm with IBM Cloud Private can elevate their privileges Vulnerability Details CVEID: CVE-2018-1714 DESCRIPTION: Any user who is authorized to deploy a Helm chart in IBM Cloud Private 2.1.0 can install an unsafe Helm Chart that can run with privileges greater than the Helm user i...

Intel Processor Diagnostic Tool elevation of privilege vulnerability (CNVD-2018-15597)

Intel Processor Diagnostic Tool IPDT is a processor function diagnostic tool from Intel USA. An elevation of privilege vulnerability exists in Intel IPDT versions prior to 4.1.0.27. A local attacker can exploit this vulnerability to execute arbitrary code...

CVE-2018-11060

RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges...

CVE-2018-11060: Undefined Security Weakness

RSA Archer, versions prior to 6.4.0.1, contain an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges...

PT-2018-10274

Name of the Vulnerable Software and Affected Versions RSA Archer versions prior to 6.4.0.1 Description The issue concerns an authorization bypass vulnerability in the REST API. A remote authenticated malicious Archer user could potentially exploit this vulnerability to elevate their privileges...

PT-2018-3226

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description The issue is related to privilege management errors in the browser. It can be exploited by a remote attacker using a specially crafted extension to elevate their privileges...

Bluetooth® pairing vulnerability

Summary: Bluetooth Pairing update. Description: A vulnerability in Bluetooth® pairing potentially allows an attacker with physical proximity within 30 meters to gain unauthorized access via an adjacent network, intercept traffic and send forged pairing messages between two vulnerable Bluetooth®...

Microsoft Windows - POP/MOV SS Local Privilege Elevation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...

Microsoft Windows POP/MOV SS Local Privilege Elevation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/common' require 'msf/core/post/file' require 'msf/core/post/windows/priv' require 'msf/core/post/windows/registry' require 'msf/core/exploit/exe'...

CVE-2018-8202

An elevation of privilege vulnerability exists in .NET Framework which could allow an attacker to elevate their privilege level, aka ".NET Framework Elevation of Privilege Vulnerability." This affects Microsoft .NET Framework 2.0, Microsoft .NET Framework 3.0, Microsoft .NET Framework...

Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2018-13383)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A privilege extractio...

CVE-2018-8308

An elevation of privilege vulnerability exists when the Windows kernel fails to properly handle objects in memory, aka "Windows Kernel Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1,...

Security Updates for Windows Server 2008 (July 2018)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in Windows Domain Name System DNS DNSAPI.dll when it fails to properly handle DNS responses. An attacker who successfully exploited the...

Android Qualcom power_stats debugfs node elevation of privilege vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google Inc. and the Open Handset Alliance OHA. qualcom powerstats debugfs node is one of the power status debugging components. An elevation of privilege...

CVE-2018-13406

An integer overflow in the uvesafbsetcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmallocarray is not used...

CVE-2018-13406

An integer overflow in the uvesafbsetcmap function in drivers/video/fbdev/uvesafb.c in the Linux kernel before 4.17.4 could result in local attackers being able to crash the kernel or potentially elevate privileges because kmallocarray is not used...

CyberArk Endpoint Privilege Manager Elevation of Privilege Vulnerability

CyberArk Endpoint Privilege Manager formerly Viewfinity is a privilege management software from CyberArk Software. The software includes features such as privilege management, application control, and credential loss protection. A security vulnerability exists in CyberArk Endpoint Privilege...

Cross-site Scripting (XSS)

Microsoft.AspNet.SignalR is vulnerable to cross-site scripting XSS attack. The application does not properly sanitize user-supplied input before displaying it. This can allow a malicious user to inject and execute arbitrary code in the target user's browser which can lead to access to...

Security feature bypass

A vulnerability has been identified in RAPIDLab 1200 systems / RAPIDPoint 400 systems / RAPIDPoint 500 systems All versionswithout use of Siemens Healthineers Informatics products, RAPIDLab 1200 Series All versions = V3.0 with Siemens Healthineers Informatics products, RAPIDPoint 500 systems...