CVE-2018-11208

An issue was discovered in Z-BlogPHP 2.0.0. There is a persistent XSS that allows remote attackers to inject arbitrary web script or HTML into background web site settings via the "copyright information office" field. NOTE: the vendor indicates that the product was not intended to block this type...

Microsoft Windows DirectX Graphics Kernel Local Elevation of Privilege Vulnerability (CNVD-2018-11544)

Microsoft Windows Server 2016 and others are operating systems released by Microsoft Corporation USA.DirectX Graphics Kernel DXGKRNL is one of the graphics kernel drivers. A local elevation of privilege vulnerability exists in Microsoft Windows DirectX Graphics Kernel, which stems from the progra...

Microsoft SharePoint Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected SharePoint...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to...

mysql: Server: Security: Privileges unspecified vulnerability (CPU Apr 2018)

Vulnerability in the MySQL Server component of Oracle MySQL subcomponent: Server : Security : Privileges. Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via...

Apple MacOS Privilege Vulnerability

macOS is Apple's proprietary operating system for the Mac line of products. Apple MacOS suffers from a power lifting vulnerability, which can be exploited by attackers to perform unauthorized operations and gain elevated privileges...

SUSE-SU-2018:1000-1 Security update for the Linux Kernel (Live Patch 26 for SLE 12)

This update for the Linux Kernel 3.12.61-5289 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation of...

SUSE-SU-2018:1006-1 Security update for the Linux Kernel (Live Patch 23 for SLE 12)

This update for the Linux Kernel 3.12.61-5280 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation of...

SUSE-SU-2018:1034-1 Security update for the Linux Kernel (Live Patch 22 for SLE 12 SP1)

This update for the Linux Kernel 3.12.74-606463 fixes several issues. The following security issues were fixed: - CVE-2017-13166: An elevation of privilege vulnerability was fixed in the kernel v4l2 video driver. bsc1085447. - CVE-2018-1068: A flaw was found in the Linux kernels implementation of...

Google Android mnh Driver Privilege Vulnerability

Android on Google Pixel and Nexus is an open source Linux-based operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA. mnh driver is one of the mnh driver. The mnh driver in Android on Google Pixel and Nexus devices is vulnerable to a...

CVE-2017-0751

CVE-2017-0751 is a local elevation-of-privilege vulnerability in the Qualcomm QCE driver affecting Android kernel. Affected component: QCE driver within the Android platform; vulnerable code path enables a privileged escalation. Exploitation status is not detailed in the provided documents. The v...

Privilege escalation

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611...

CVE-2015-9015

An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714120...

CVE-2017-13306

A elevation of privilege vulnerability in the Upstream kernel mnh driver. Product: Android. Versions: Android kernel. Android ID: A-70295063...

CVE-2017-13306

CVE-2017-13306 is an elevation-of-privilege vulnerability in the Upstream kernel mnh driver affecting Android kernel components. The issue is categorized as EoP with a moderate severity in Android security bulletins, implying a privilege escalation path within the kernel module rather than user-s...

Microsoft Windows Kernel Elevation of Privilege Vulnerability (KB4100480)

This host is missing a critical security update according to Microsoft KB4100480 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Video Control Elevation of Privilege Vulnerability

Microsoft Windows Server 2008 R2 SP1 and others are a series of operating systems released by Microsoft Corporation in the U.S. Video Control is one of the video control components. A privilege vulnerability exists in Microsoft Video Control, which stems from the program's failure to properly...

CVE-2018-0923

Microsoft SharePoint Enterprise Server 2016 allows an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909, CVE-2018-0910. CVE-2018-0911, CVE-2018-0912,...

CVE-2018-0882

The Desktop Bridge in Windows 10 1607, 1703, and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to how the virtual registry is managed, aka "Windows Desktop Bridge Elevation of Privilege Vulnerability". This CVE is unique from...

CVE-2018-0911

Microsoft Project Server 2013 SP1 and Microsoft SharePoint Enterprise Server 2016 allow an elevation of privilege vulnerability to due how specially crafted web requests are sanitized, aka "Microsoft SharePoint Elevation of Privilege Vulnerability". This CVE is unique from CVE-2018-0909,...