1492 matches found
CVE-2020-0629
An elevation of privilege vulnerability exists in the way that the Windows Search Indexer handles objects in memory, aka 'Windows Search Indexer Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0613, CVE-2020-0614, CVE-2020-0623, CVE-2020-0625, CVE-2020-0626,...
Microsoft Windows Windows Printer Service Privilege Vulnerability
Microsoft Windows is a family of operating systems from Microsoft.Microsoft Windows Windows Printer Service is a printing service in Microsoft Windows. A privilege vulnerability exists in Microsoft Windows Windows Printer Service, which originates when the program does not properly validate the...
OPENSUSE-SU-2019:2535-1 Security update for ghostscript
This update for ghostscript fixes the following issues: - CVE-2019-14869: Fixed a possible dSAFER escape which could have allowed an attacker to gain high privileges by a specially crafted Postscript code bsc1156275. This update was imported from the SUSE:SLE-15:Update update project...
Scanguard Insecure Privilege Vulnerability
Scanguard is a computer protection software. Scanguard suffers from an insecure privilege vulnerability that can be exploited by an attacker to elevate privileges...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1433, CVE-2019-1435, CVE-2019-1437, CVE-2019-1438...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1407, CVE-2019-1433, CVE-2019-1437, CVE-2019-1438...
CVE-2019-1435
An elevation of privilege vulnerability exists when the Windows Graphics Component improperly handles objects in memory, aka 'Windows Graphics Component Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1407, CVE-2019-1433, CVE-2019-1437, CVE-2019-1438...
CVE-2019-1435
Technical details for CVE-2019-1435 are not publicly available in the provided documents. Connected entries mention malware but do not reveal the affected component, root cause, impact, or remediation. Monitor for updates.
CVE-2019-1416
An elevation of privilege vulnerability exists due to a race condition in Windows Subsystem for Linux, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'...
CVE-2019-1385
An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate...
CVE-2019-1380
A local elevation of privilege vulnerability exists in how splwow64.exe handles certain calls, aka 'Microsoft splwow64 Elevation of Privilege Vulnerability'...
mysql: Server: Security: Privileges unspecified vulnerability (CPU Jul 2019)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructu...
mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2019)
Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server: Security: Privileges. Supported versions that are affected are 5.6.43 and prior, 5.7.25 and prior and 8.0.15 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multip...
ZTE 9000E Privilege Permission and Access Control Issues Vulnerability
The ZTE 9000E is a carrier-grade multi-service packet platform product from China's ZTE Corporation ZTE. A privilege permission and access control issue vulnerability exists in ZTE 9000E 9000EV5.0R1B12 and earlier versions, which can be exploited by an attacker to directly setup and change the...
CloudBees Jenkins ElasticBox Jenkins Kubernetes CI/CD Plugin Access Privilege Vulnerability
CloudBees Jenkins Hudson Labs is a set of Java-based development of continuous integration tools from the U.S. company CloudBees. The product is mainly used to monitor continuous software version release/testing projects and some timed tasks.ElasticBox Jenkins Kubernetes CI/CD Plugin is used in...
Cisco TelePresence Collaboration Endpoint Software Arbitrary File Write Vulnerability (CNVD-2019-37414)
Cisco TelePresence is a Cisco TelePresence solution. A security vulnerability exists in Cisco TelePresence Collaboration Endpoint CE versions prior to 9.8.1 due to an improperly implemented privilege. An attacker can exploit the vulnerability to overwrite arbitrary files by logging in and...
Privilege escalation
An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Windows Power Service Elevation of Privilege Vulnerability'...
CVE-2019-1323
An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336...
