10 matches found
Intel® Connectivity Performance Suite Software Installer Advisory
Summary: A potential security vulnerability in some Intel® Connectivity Performance Suite software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-43747 Description: Incorrect defaul...
PT-2024-24267 · Ibm · Ibm Security Verify Privilege
Name of the Vulnerable Software and Affected Versions: IBM Security Verify Privilege version 11.6.25 Description: The issue allows an unauthenticated actor to obtain sensitive information from the SOAP API. Recommendations: For IBM Security Verify Privilege version 11.6.25, consider restricting...
ASB-A-261858325
In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PUB-A-261193664
In getAvailabilityStatus of several Transcode Permission Controllers, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
ASB-A-258759189
Messaging do not check the permission , which may cause a Elevation of privilege...
PUB-A-243480506
In ppmpuset of ppmpu.c, there is a possible EoP due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
Plausible Analytics < 1.2.3 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
Social comments by WpDevArt < 2.5.0 - Admin+ Stored Cross-Site Scripting
The plugin does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when unfilteredhtml is disallowed PoC Put the following payload in any of the plugin's text field settings such as Title , Title font-size etc: "...
libnfsidmap / NFS privilege escalation
Under some conditions, file owner is determined incorrectly...
gnats (GNU problem report management system) privilege escalation
By using -o option it's possible to overwrite local file with 'gnats' or 'root' user's privileges depending on installation...