5235 matches found
RHEL 5 : samba (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - samba: symlink race permits opening files outside share directory CVE-2017-2619 - samba: Netlogon elevati...
IBM AIX elevation of privilege vulnerability (CNVD-2024-23284)
IBM AIX is an open standards-based UNIX operating system developed by International Business Machines IBM for the IBM Power architecture. A security vulnerability exists in IBM AIX. An attacker could exploit the vulnerability to elevate privileges...
VIPRE Antivirus 安全漏洞
VIPRE Antivirus is a security software from VIPRE USA that provides all the features needed to protect PCs from virus infections and other security threats. A security vulnerability exists in VIPRE Antivirus Plus that stems from a specific flaw in the anti-malware service that allows a local...
LG Simple Editor 安全漏洞
LG Simple Editor is a simple editor from Luckin LG Korea that creates new content by simplifying the process and instant playback on signage. A local elevation of privilege vulnerability exists in LG Simple Editor, which can be exploited by an attacker to elevate privileges...
ROS-20240503-05
Microsoft Visual Studio Codef source code editor vulnerability is related to flaws in access control. access. Exploitation of the vulnerability could allow an attacker acting remotely to elevate his or her privileges...
OneThink 安全漏洞
OneThink is an open source content management framework. A security vulnerability exists in OneThink version v.1.1, which stems from an elevation of privilege vulnerability in the ModelModel.class.php component...
WordPress plugin Login as User or Customer 授权问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An authorization issue vulnerability exists in...
CVE-2024-20356
A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability...
CVE-2024-20356
A vulnerability in the web-based management interface of Cisco Integrated Management Controller IMC could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability...
Electrolink FM/DAB/TV Transmitter 安全漏洞
The Electrolink FM/DAB/TV Transmitter is a series of transmitters from Electrolink. A security vulnerability exists in the Electrolink FM/DAB/TV Transmitter that stems from the presence of an elevation of privilege vulnerability, which could lead to an attacker manipulating or tampering with...
Cisco Integrated Management Controller CLI Command Injection Vulnerability
A vulnerability in the CLI of the Cisco Integrated Management Controller IMC could allow an authenticated, local attacker to perform command injection attacks on the underlying operating system and elevate privileges to root. To exploit this vulnerability, the attacker must have read-only or high...
Hewlett Packard Enterprise MSA SAN Storage和VSS Provider and CAPI Proxy software 安全漏洞
Hewlett Packard Enterprise MSA SAN Storage and Hewlett Packard Enterprise VSS Provider and CAPI Proxy software are products of Hewlett Packard Enterprise, Inc. Hewlett Packard Enterprise MSA SAN Storage is a modular intelligent storage array. Hewlett Packard Enterprise VSS Provider and CAPI Proxy...
HPESBHF04633 rev.1 - HPE Superdome Flex, Superdome Flex 280 and Compute Scale-up Server 3200 Servers, Privilege Elevation and Arbitrary Code Execution
Potential Security Impact: Local: Execution of Arbitrary Code With Privilege Elevation, Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Compute Scale-up Server 3200 - Prior to v1.20.128 HPE Superdome Flex 280 Server - Prior to v1.70.14 HPE Superdome Flex Server...
Microsoft Windows Update Stack Elevation of Privilege Vulnerability
The Microsoft Windows Update Stack is part of Microsoft's USA for managing updates. A security vulnerability exists in Microsoft Windows Update Stack. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Multiple Vulnerabilities (KB5036892)
This host is missing an important security update according to Microsoft KB5036892 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Microsoft Windows Multiple Vulnerabilities (KB5036894)
This host is missing an important security update according to Microsoft KB5036894 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2024-2918
Improper input validation in PAM JIT elevation feature in Devolutions Server 2024.1.6 and earlier allows an attacker with access to the PAM JIT elevation feature to forge the displayed group in the PAM JIT elevation checkout request via a specially crafted request...
CVE-2024-28917
Azure Arc-enabled Kubernetes Extension Cluster-Scope Elevation of Privilege Vulnerability...