CVE-2024-54465

A logic issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.2. An app may be able to elevate privileges...

CVE-2024-52537

Dell Client Platform Firmware Update Utility contains an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

Ivanti Security Control 安全漏洞

Ivanti security controls is a unified IT management platform from US-based Ivanti Inc. It is used to manage and protect Windows-based computers, Linux-based computers and VMware ESXi virtual machine monitoring programs. Ivanti security controls suffers from an elevation of privilege vulnerability...

PT-2024-35364 · Dell · Dell Client Platform Firmware Update Utility

Name of the Vulnerable Software and Affected Versions: Dell Client Platform Firmware Update Utility affected versions not specified Description: The issue is related to an Improper Link Resolution vulnerability. A high privileged attacker with local access could potentially exploit this...

HPESBNW04768 rev.2 - HPE Telco Service Orchestrator, Multiple Vulnerabilities

Potential Security Impact: Remote: Cross-Site Request Forgery CSRF, Denial of Service DoS, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Telco Service Orchestrator - Prior to v5.1.2 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | |...

CVE-2024-49076 Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability

...

CVE-2024-49074 Windows Kernel-Mode Driver Elevation of Privilege Vulnerability

...

Security Updates for Microsoft SharePoint Server 2019 (December 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid212234;...

Microsoft Windows Virtualization-Based Security Enclave 授权问题漏洞

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment within the host application address space from Microsoft Corporation USA. An authorization issue vulnerability exists in Microsoft Windows Virtualization-Based...

Security Updates for Microsoft SharePoint Server Subscription Edition (December 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Seven Bolt-Ons to Make Your Entra ID More Secure for Critical Sessions

Identity security is all the rage right now, and rightfully so. Securing identities that access an organization's resources is a sound security model. But IDs have their limits, and there are many use cases when a business should add other layers of security to a strong identity. And this is what...

CVE-2024-46624

An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an unspecified vulnerability that stems from incorrect input validation and could lead to local elevation of privilege. No details of the vulnerability are provided at this time...

MediaTek Chipsets 安全漏洞

MediaTek Chipsets are a variety of chips from China's MediaTek MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from an incorrect Modem boundary check, which could lead to elevation of privilege...

Progress Software WhatsUp Gold 安全漏洞

Progress Software WhatsUp Gold is a network monitoring software from Progress Software, Inc. It is used to monitor the entire network infrastructure as well as applications, configurations and network traffic. A security vulnerability exists in Progress Software WhatsUp Gold versions prior to...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor allows attackers to exploit it to increase their privileges. This vulnerability stems from insufficient validation of input data.

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

CVE-2024-49038

Improper neutralization of input during web page generation 'Cross-site Scripting' in Copilot Studio by an unauthorized attacker leads to elevation of privilege over a network...

CVE-2024-49052

CVE-2024-49052 is a Microsoft Azure PolicyWatch elevation-of-privilege vulnerability described as missing authentication for a critical function, enabling a network-based attacker to raise privileges without user interaction. Connected sources corroborate a network-exposed, high-severity issue (C...

CVE-2024-49035

The CVE-2024-49035 issue affects Partner.Microsoft.com (Microsoft Partner Center) and is caused by improper access control, enabling an unauthenticated attacker to elevate privileges over a network. Public metrics show a critical risk (CVSS v3.1: base score up to 9.8; NETWORK attack vector; privi...

Microsoft Azure PolicyWatch Elevation of Privilege Vulnerability

Missing authentication for critical function in Microsoft Azure PolicyWatch allows an unauthorized attacker to elevate privileges over a network...