5269 matches found
PT-2020-4308 · Microsoft · Windows Iscsi Target Service +1
Name of the Vulnerable Software and Affected Versions: Windows iSCSI Target Service affected versions not specified Description: An elevation of privilege issue exists due to the improper handling of file operations by the Windows iSCSI Target Service. To exploit this, an attacker would first nee...
PT-2020-4320 · Microsoft · Windows Backup Service +1
Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...
PT-2020-4387 · Microsoft · Azure Functions
Name of the Vulnerable Software and Affected Versions: Azure Functions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the way Azure Functions validate access keys. An unauthenticated attacker who successfully exploited this...
PT-2020-4310 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: An elevation of privilege issue exists due to the Windows kernel-mode driver's failure to properly handle objects in memory. This could allow an attacker to run arbitrary code in kernel mod...
Input validation
A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this...
Input validation
A vulnerability in the CLI of Cisco StarOS operating system for Cisco ASR 5000 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. The vulnerability is due to insufficient input validation of CLI commands. An attacker could exploit this...
CVE-2019-14557
Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access...
Cross site request forgery (csrf)
In Lansweeper 8.0.130.17, the web console is vulnerable to a CSRF attack that would allow a low-level Lansweeper user to elevate their privileges within the application...
CVE-2020-13658
CVE-2020-13658 affects Lansweeper 8.0.130.17 where the web console is vulnerable to a CSRF attack that enables a low-privilege user to elevate privileges within the application. The vulnerability arises from insufficient CSRF protection in the web interface, leading to unauthorized privilege esca...
Vulnerability fixed in Trend Micro OfficeScan
A vulnerability has been fixed in Trend Micro OfficeScan. The vulnerability allows a malicious party to obtain elevated permissions and execute arbitrary code under the user's privileges. Trend Micro has released updates to fix the vulnerability. fix. More information can be found on the page...
Trend Micro OfficeScan XG SP1 Elevation of Privilege Vulnerability
Trend Micro OfficeScan XG is a suite of distributed anti-virus software from Trend Micro. A security vulnerability in Trend Micro OfficeScan XG SP1 for Microsoft Windows platforms can be exploited to create a hard link to any file on a system, which can then be manipulated for privilege elevation...
Design/Logic Flaw
Multiple vulnerabilities in the web management framework of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to elevate privileges to the level of an Administrator user on an affected device. For more information about these vulnerabilities, see the...
The vulnerability of the PCIe function in the microprogramming software of Intel FPGA Programmable Acceleration Card N3000 allows a hacker to enhance their privileges.
The vulnerability of the PCIe function in the microprogramming software of Intel FPGA Programmable Acceleration Card N3000 is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...
CVE-2020-25599
An issue was discovered in Xen through 4.14.x. There are evtchnreset race conditions. Uses of EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftreset by itself covered by XSA-77 can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses ...
CVE-2020-25599
An issue was discovered in Xen through 4.14.x. There are evtchnreset race conditions. Uses of EVTCHNOPreset potentially by a guest on itself or XENDOMCTLsoftreset by itself covered by XSA-77 can lead to the violation of various internal assumptions. This may lead to out of bounds memory accesses ...
Android NFC Buffer Overflow Vulnerability
Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. A security vulnerability exists in the Android-11 version, which stems from a lack of boundary checking for NFC, and can be exploited by an attacker to elevate local privileges...
CVE-2020-6546
Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...
CVE-2020-6546
Inappropriate implementation in installer in Google Chrome prior to 84.0.4147.125 allowed a local attacker to potentially elevate privilege via a crafted filesystem...
CVE-2020-6546
CVE-2020-6546 affects Google Chrome on Windows/macOS/Linux via an Inappropriate implementation in the installer. The root cause is an flawed installer flow that can be abused by a local attacker to escalate privileges through a crafted filesystem, as detailed in multiple advisories. The impact is...