Airlift.microsoft.com Elevation of Privilege Vulnerability

Authentication bypass by assumed-immutable data on airlift.microsoft.com allows an authorized attacker to elevate privileges over a network...

Ivanti Secure Access Client 安全漏洞

Ivanti Secure Access Client is a security software client developed by Ivanti, Inc. to enable remote secure access, supporting enterprise-class VPN connections and encrypted access to resources. An elevation of privilege vulnerability exists in Ivanti Secure Access Client, which stems from the...

PT-2024-9207 · Apache +1 · Apache Traffic Server +1

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 9.2.0 through 9.2.5 Apache Traffic Server versions 10.0.0 through 10.0.1 Description: The issue is related to an unchecked return value that can allow Apache Traffic Server to retain privileges on startup. This...

Microsoft Win32k 安全漏洞

Microsoft Win32k is a system file for Windows multi-user management from Microsoft USA. A security vulnerability exists in Microsoft Win32k. An attacker can exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

AMD Management Console 安全漏洞

AMD Management Console is a graphical user interface GUI-based management application from UltraMicroelectronics AMD that is targeted at small and medium business SMB environments. AMD Management Console has a security vulnerability that stems from incorrect default permissions. An attacker...

PT-2024-10316 · Microsoft · Azure Database For Postgresql Flexible Server

Name of the Vulnerable Software and Affected Versions: Azure Database for PostgreSQL Flexible Server affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Azure Database for PostgreSQL Flexible Server. It is associated with a failure to...

PT-2024-10218 · Schneider Electric · Schneider Electric Powerlogic Hdpm6000

Name of the Vulnerable Software and Affected Versions: Schneider Electric PowerLogic HDPM6000 version 0.62.7 Description: The issue is related to an authorization bypass vulnerability that could allow an authorized attacker to modify values outside those defined by their privileges, potentially...

Cisco Secure Firewall Management Center Elevation of Privilege Vulnerability

Cisco Secure Firewall Management Center is a security firewall management software from Cisco. A role privilege check security vulnerability exists in the Cisco Secure Firewall Management Center WEB interface, which can be exploited by a remote attacker to submit a special request that can elevat...

CVE-2024-50616

Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job information...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from allowing elevation of privilege in the ABL component...

CVE-2024-20482

CVE-2024-20482 affects Cisco Secure Firewall Management Center (FMC) web-based management interface. An authenticated user with a custom read-only role can exploit insufficient validation of role permissions to perform a write operation, potentially modifying certain parts of the configuration. T...

CVE-2024-20370

A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to elevate their administrative privileges to root. The attacker would need...

Online Complaint Site SQL注入漏洞

Online Complaint Site is an online complaint site for janobe individual developers. A security vulnerability exists in Online Complaint Site version v.1.0, which stems from susceptibility to SQL injection attacks and allows remote attackers to elevate privileges via username and password paramete...

PT-2024-7973 · Nvidia · Nvidia Virtual Gpu Manager

Name of the Vulnerable Software and Affected Versions: NVIDIA Virtual GPU Manager affected versions not specified Description: The issue is related to incorrect permission assignment for a critical resource in the NVIDIA Virtual GPU Manager component. This could allow an attacker to gain...

Acronis Cyber Files 代码问题漏洞

Acronis Cyber Files is a secure file synchronization and sharing solution from Acronis Switzerland. A code issue vulnerability exists in Acronis Cyber Files versions prior to 9.0.0x24 that stems from DLL hijacking leading to local elevation of privilege...

SolarWinds Platform 代码问题漏洞

SolarWinds Platform is a unified monitoring, observability, and service management platform from U.S.-based SolarWinds, Inc. A code issue vulnerability exists in SolarWinds Platform versions 2024.2.1 and earlier, which stems from vulnerability to an uncontrolled local elevation of privilege...

WordPress plugin Essential Addons for Elementor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-38139

Improper authentication in Microsoft Dataverse allows an authorized attacker to elevate privileges over a network...

CVE-2024-38139

Microsoft Dataverse contains an elevation of privilege vulnerability due to improper authentication. An authorized attacker could elevate privileges over the network. Affected component/function is Dataverse authentication/auth checks. Underlying impact includes high confidentiality and integrity...

WordPress plugin AppPresser – Mobile App Framework 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin.... An authorization issue...