Adobe Commerce Improper Access Control Vulnerability (CNVD-2024-41458)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper access control vulnerability exists in Adobe Commerce, which can be exploited by an attacker to cause an elevation of privilege...

Siemens Questa and ModelSim Uncontrolled Search Path Element Vulnerability

Questa and ModelSim simulators are used worldwide for simulating, debugging and verifying integrated circuit designs, among other things. An uncontrolled search path element vulnerability exists in Siemens Questa and ModelSim, which can be exploited by an authenticated, local attacker to inject...

Microsoft Windows Multiple Vulnerabilities (KB5044286)

This host is missing a critical security update according to Microsoft KB5044286 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5044293)

This host is missing an important security update according to Microsoft KB5044293 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2024-7820

Name of the Vulnerable Software and Affected Versions Buildah affected versions not specified Description A vulnerability exists in Buildah due to incorrect restriction of the path name to a directory with limited access. This issue allows an attacker to elevate privileges in the system by...

Microsoft Windows Multiple Vulnerabilities (KB5044277)

This host is missing an important security update according to Microsoft KB5044277 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-43583

Winlogon Elevation of Privilege Vulnerability...

PT-2024-6836

Name of the Vulnerable Software and Affected Versions Visual C++ Redistributable Installer affected versions not specified Description The issue is related to insufficient access restrictions in the Visual C++ Redistributable Installer, which is part of the Microsoft Visual Studio development...

KB5044306: Windows Server 2008 Security Update (October 2024)

The remote Windows host is missing security update 5044306. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2024-38212, CVE-2024-38261, CVE-2024-38265, CVE-2024-43453, CVE-2024-43549, CVE-2024-43564,...

Microsoft Local Security Authority Server 安全漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...

Microsoft Windows Kernel 资源管理错误漏洞

Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Kernel. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are...

CVE-2024-45919

A security flaw has been discovered in Solvait version 24.4.2 that allows an attacker to elevate their privileges. By manipulating the Request ID and Action Type parameters in /AssignToMe/SetAction, an attacker can bypass approval workflows leading to unauthorized access to sensitive information ...

CVE-2024-45919

CVE-2024-45919 affects Solvait 24.4.2. The vulnerability arises from a flaw in the /AssignToMe/SetAction endpoint where manipulating Request ID and Action Type can bypass approval workflows, enabling privilege escalation and potential access to sensitive data or fraudulent approvals. Connected so...

CVE-2024-20393

Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers contain a vulnerability in the web-based management interface that discloses sensitive information, enabling an authenticated, remote attacker to escalate privileges from guest to admin by sending crafted HTTP inpu...

CVE-2024-44193

A logic issue was addressed with improved restrictions. This issue is fixed in iTunes 12.13.3 for Windows. A local attacker may be able to elevate their privileges...

Webkul Krayin CRM 安全漏洞

Webkul Krayin CRM is a free and open source CRM solution for small and medium-sized businesses from Webkul India. A security vulnerability exists in Webkul Krayin CRM version 1.3.0, which stems from the presence of a Client-Side Template Injection CSTI vulnerability that allows a remote attacker ...

CVE-2024-7479

Improper verification of cryptographic signature during installation of a VPN driver via the TeamViewerservice.exe component of TeamViewer Remote Clients prior version 15.58.4 for Windows allows an attacker with local unprivileged access on a Windows system to elevate their privileges and install...

CVE-2024-7481

CVE-2024-7481 relates to TeamViewer Remote Clients on Windows where improper verification of a cryptographic signature during Printer driver installation via TeamViewer_service.exe allows a local, unprivileged user to elevate privileges by loading a driver. The issue affects versions prior to 15....

The vulnerability of the Microsoft SQL Server database management system, related to deficiencies in access control, allows attackers to enhance their privileges.

The vulnerability of the Microsoft SQL Server database management system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

Doccano 安全漏洞

doccano is an open source human text annotation tool from doccano open source. A security vulnerability exists in Doccano v1.8.4 and earlier versions. A remote attacker exploited the vulnerability to elevate privileges via a specially crafted REST request...