The vulnerability of the Windows Partition Management Driver in the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Partition Management Driver in the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

Hardcoded credentials

Use of Hard-coded Cryptographic Key vulnerability in the WebReportsApi.dll of Exago Web Reports, as used in the Device42 Asset Management Appliance, allows an attacker to leak session IDs and elevate privileges. This issue affects: Device42 CMDB versions prior to 18.01.00...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-85762)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android has an elevation of privilege vulnerability that can be exploited by attackers to elevate privileges...

CVE-2022-22455

IBM Security Verify Governance Identity Manager 10.0 virtual appliance component performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. IBM X-Force ID: 224989...

Microsoft Azure Site Recovery Elevation of Privilege Vulnerability (CNVD-2022-67843)

Microsoft Azure Site Recovery ASR is a DRaaS provided by Azure for cloud and hybrid cloud architectures. Microsoft Azure Site Recovery suffers from an elevation of privilege vulnerability. An attacker could exploit this vulnerability to elevate privileges...

Intel NUC 安全漏洞

The Intel NUC is a small minicomputer from Intel USA. A security vulnerability exists in the Intel NUC 9 Extreme Laptop Kit, which stems from improper buffer restriction. An attacker exploited the vulnerability to elevate privileges...

Intel PROSet/Wireless WiFi Software 加密问题漏洞

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation USA. A security vulnerability exists in Intel PROSet/Wireless WiFi Software, which stems from insufficient encryption strength. The vulnerability can be exploited by an attacker to elevate privileges...

CVE-2022-35780

Azure Site Recovery Elevation of Privilege Vulnerability...

CVE-2022-35818 Azure Site Recovery Elevation of Privilege Vulnerability

...

CVE-2022-35791 Azure Site Recovery Elevation of Privilege Vulnerability

...

Microsoft Exchange Server Elevation of Privilege Vulnerability

...

PT-2022-4214 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically affecting the VMware to Azure functionality. Exploitation of this issue may allow an...

PT-2022-4722 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access controls in Azure Site Recovery, specifically in the VMWare to Azure component. This can be exploited by a remote attacker to elevate...

PT-2022-4107 · Microsoft · Azure Batch Node Agent +1

Name of the Vulnerable Software and Affected Versions: Azure Batch Node Agent affected versions not specified Description: The issue is related to insufficient access restrictions in the Azure Batch service for Windows operating systems. Exploitation of this issue may allow an attacker to elevate...

PT-2022-4731 · Microsoft · Azure Site Recovery

Name of the Vulnerable Software and Affected Versions: Azure Site Recovery affected versions not specified Description: The issue is related to insufficient access restrictions in the Azure Site Recovery emergency recovery tool for VMWare to Azure, which could allow a remote attacker to elevate...

KLA12602 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to cause denial of service, gain privileges, bypass security restrictions, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of...

PT-2022-4160 · Microsoft · Ata Port Driver +1

Name of the Vulnerable Software and Affected Versions: Microsoft ATA Port Driver affected versions not specified Description: The issue is related to insufficient access restrictions in the Microsoft ATA Port Driver, which can be exploited to elevate privileges. This allows an attacker to affect...

OESA-2022-1798 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A flaw was found in Samba. Samba AD users can cause the server to access uninitialized data with an LDAP add or modify the request, usually resulting in a segmentation fault.CVE-2022-32745 A flaw was fou...

多款VMware产品安全漏洞

VMware vRealize Automation and others are products of VMware, Inc. vRealize Automation is a management tool that provides self-service, supervised multi-cloud automation. vMware Workspace One Access is a centralized management console that enables you to manage users and groups, set and manage...

Google Android elevation of privilege vulnerability (CNVD-2022-65639)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability. The vulnerability stems from incorrect programmatic calls to high-level native procedures. An attacker can exploit this vulnerability to elevate privilege...