Microsoft Azure PolicyWatch 访问控制错误漏洞

Microsoft Azure PolicyWatch is an application from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Azure PolicyWatch that stems from a lack of authentication for critical functions, allowing an unauthorized attacker to elevate privileges through the network...

Avast Cleanup 后置链接漏洞

Avast Cleanup is a computer cleaning software from Avast. Avast Cleanup suffers from a back-link vulnerability that stems from the presence of a local elevation of privilege issue that could allow an attacker to elevate privileges and execute arbitrary code on an affected installation...

Avast Free Antivirus 后置链接漏洞

Avast Free Antivirus is a suite of free antivirus software from the Czech company Avast. A backlink vulnerability exists in Avast Free Antivirus that stems from a local elevation of privilege issue that could allow an attacker to elevate privileges on an affected installation and execute arbitrar...

WordPress plugin deco.Agencyde 访问控制错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An access control...

CVE-2017-13315

In writeToParcel and createFromParcel of DcParamObject.java, there is a permission bypass due to a write size mismatch. This could lead to an elevation of privileges where the user can start an activity with system privileges, with no additional execution privileges needed. User interaction is no...

Google Android 安全漏洞

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, and 8.1. An attacker can exploit this...

Redaxo 安全漏洞

Redaxo is a content management system from Redaxo open source. A security vulnerability exists in Redaxo v 5.17, which stems from a mediapool feature that is vulnerable to cross-site scripting attacks and allows remote attackers to elevate privileges...

CVE-2022-20871

A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance WSA, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient...

Defense-in-Depth Security Updates for Microsoft SharePoint Server 2016 (November 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by a privilage elevation vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid211461;...

Google Android elevation of privilege vulnerability (CNVD-2024-49502)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...

McAfee Total Protection 安全漏洞

McAfee Total Protection MTP is a suite of antivirus software from McAfee USA. A security vulnerability exists in McAfee Total Protection version 16.0.53, which stems from improper access control and results in local elevation of privilege...

Intel VPL 安全漏洞

Intel VPL is a video processing library from Intel Corporation USA . A security vulnerability exists in Intel VPL versions prior to 24.1.4, which stems from improper buffer restriction. An attacker can exploit the vulnerability to elevate privileges...

Intel Server Board M70KLP 访问控制错误漏洞

Intel Server Board M70KLP is a server motherboard from Intel Corporation, USA. An Access Control Error vulnerability exists in Intel Server Board M70KLP UEFI, which stems from improper access control. An attacker can exploit the vulnerability to elevate privileges...

Intel Rendering Toolkits 代码问题漏洞

Intel Rendering Toolkits is a rendering toolkit from Intel Corporation USA. Accelerates these types of workloads with a set of rendering and ray tracing libraries to create high-performance, high-fidelity visual experiences. A code issue vulnerability exists in Intel Rendering Toolkits versions...

CVE-2024-49042

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability...

CVE-2024-43613

Azure Database for PostgreSQL Flexible Server Extension Elevation of Privilege Vulnerability...

CVE-2024-49044

Visual Studio Elevation of Privilege Vulnerability...

CVE-2024-43636

CVE-2024-43636 is a Win32k local elevation-of-privilege vulnerability with a CVSSv3.1 base score 7.8 (LOCAL, LOW PRIVILEGES, NO USER INTERACTION; impacts HIGH across confidentiality, integrity, and availability). CONNECTED documents confirm Windows OS components (Win32k) are affected and that Mic...

CVE-2024-43623 Windows NT OS Kernel Elevation of Privilege Vulnerability

...

CVE-2024-43530

CVE-2024-43530 is a Windows Update Stack Elevation of Privilege vulnerability. The connected documents confirm this vulnerability affects Windows Update Stack and is associated with an elevated-privilege impact (CVE ID listed with “Obtaining elevated privileges/privilege escalation”) and a local-...