1488 matches found
Koha 安全漏洞
Koha is a library automation management system developed by the Koha organization. There is a security vulnerability in Koha, which stems from improper validation of the displayby parameter in the /cgi-bin/koha/suggestion/suggestion.pl endpoint. This vulnerability could allow users with low...
CVE-2026-26115 SQL Server Elevation of Privilege Vulnerability
...
CVE-2026-25174 Windows Extensible File Allocation Table Elevation of Privilege Vulnerability
...
KB5077473 - Description of the security update for SQL Server 2016 SP3 Azure Connect Feature Pack: March 10, 2026
None None...
CVE-2026-21237 Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
CVE-2026-21236 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
...
CVE-2026-21242 Windows Subsystem for Linux Elevation of Privilege Vulnerability
...
Oracle Solaris security vulnerabilities
Oracle Solaris is a UNIX operating system developed by Oracle Corporation in the United States. Version 11 of Oracle Solaris contains a security vulnerability. This vulnerability allows high-privilege attackers to attack through login into the infrastructure, potentially leading to unauthorized...
WordPress Aplazo Payment Gateway plugin missing privileges vulnerability
WordPress Aplazo Payment Gateway plugin is a payment gateway plugin for WooCommerce stores that allows customers to choose "buy now, pay later" payment method at the time of purchase. A lack of privileges vulnerability exists in WordPress Aplazo Payment Gateway plugin, which can be exploited by a...
MiracleLinux 8 : krb5-1.18.2-25.el8 (AXEA:2023-6164:06)
The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXEA:2023-6164:06 advisory. - Windows Kerberos Elevation of Privilege Vulnerability CVE-2022-37967 Note that Nessus has not tested for this issue but has instead relied only on the...
CVE-2026-20871 Desktop Window Manager Elevation of Privilege Vulnerability
...
CVE-2026-21224
CVE-2026-21224 is a stack-based buffer overflow in the Microsoft Azure Connected Machine Agent that permits an authorized local attacker to elevate privileges on the host. The vulnerability is tied to the Azure Connected Machine Agent, with a CVSS v3.1 base score of 7.8 (HIGH) and LOCAL, LOW-Comp...
CVE-2026-20820 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2021-2145
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to...
Apple macOS Tahoe 安全漏洞
Apple macOS Tahoe is a desktop operating system released by Apple on June 10, 2025, using the LiquidGlass design language and integrating several AI and cross-device features. Apple macOS Tahoe suffers from a privilege issue vulnerability that stems from the system having insufficient security...
Dell Command Monitor Elevation of Privilege Vulnerability
Dell Command Monitor is a software from Dell USA that manages Dell's enterprise client systems. An elevation of privilege vulnerability exists in Dell Command Monitor, which can be exploited by an attacker to cause an elevation of privilege...
CVE-2025-58727 Windows Connected Devices Platform Service Elevation of Privilege Vulnerability
...
CVE-2025-59277 Windows Authentication Elevation of Privilege Vulnerability
...
CVE-2025-58719
CVE-2025-58719 affects the Connected Devices Platform Service (Cdpsvc) in Windows. The issue is a use-after-free vulnerability that could allow an authorized local attacker to achieve privilege elevation. The connected documents confirm the vulnerability and its local impact, but do not provide e...
