Kernel Streaming Service Driver Elevation of Privilege Vulnerability

...

PT-2024-28538

Name of the Vulnerable Software and Affected Versions Dell PowerScale InsightIQ versions 5.0 through 5.1 Description The issue is related to an Improper Access Control vulnerability. A high-privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of...

PT-2024-27899 · Microsoft · Azure Web Apps

Name of the Vulnerable Software and Affected Versions: Azure Web Apps affected versions not specified Description: An authenticated attacker can exploit an improper authorization issue in Azure Web Apps to elevate privileges over a network. Recommendations: At the moment, there is no information...

PT-2024-27897 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide...

PT-2024-6236

Name of the Vulnerable Software and Affected Versions Microsoft SQL Server affected versions not specified Description The issue is related to an insufficient input validation in the OLE DB driver for SQL Server on Windows operating systems. This can be exploited by a remote attacker to elevate...

PT-2024-6245

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to a buffer overflow in the stack of the Win32k component Win32k.sys in Windows operating systems. This can allow an attacker to elevate their privileges. An...

PT-2024-29941 · Dell · Dell Thinos

Name of the Vulnerable Software and Affected Versions: Dell ThinOS versions 2402 and 2405 Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a 'Command Injection' vulnerability. An unauthenticated attacker with physical access coul...

KLA73222 Multiple vulnerabilities in Microsoft Products (ESU)

Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a...

KB5043076: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (September 2024)

The remote Windows host is missing security update 5043076. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Microsoft Management Console Remote Code Execution Vulnerability CVE-2024-38259 - Windows Remote Access Connection...

PT-2024-6283

Name of the Vulnerable Software and Affected Versions Microsoft Dynamics 365 Business Central affected versions not specified Description The issue is related to deficiencies in the authentication procedure of Microsoft Dynamics 365 Business Central. Exploitation of this issue may allow a remote...

CVE-2024-38194: Improper Input Validation

An authenticated attacker can exploit an improper authorization vulnerability in Azure Web Apps to elevate privileges over a network...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability caused by a lack of privilege checking in CreateofSettingsHomepageActivity.java, which can be exploited by an attacker to gain elevated privileges on the...

Cisco Fixes Two Critical Flaws in Smart Licensing Utility to Prevent Remote Attacks

Cisco has released security updates for two critical security flaws impacting its Smart Licensing Utility that could allow unauthenticated, remote attackers to elevate their privileges or access sensitive information. A brief description of the two vulnerabilities is below - CVE-2024-20439 CVSS...

CVE-2023-49233

Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative Visual Planning account to utilize functions normally reserved for administrators. The affected functions allow attackers to obtain different types of...

CVE-2024-43801: Exposure of Sensitive Information to an Unauthorized Actor

Jellyfin is an open source self hosted media server. The Jellyfin user profile image upload accepts SVG files, allowing for a stored XSS attack against an admin user via a specially crafted malicious SVG file. When viewed by an admin outside of the Jellyfin Web UI e.g. via "view image" in a...

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A code issue vulnerability previously existed in Acronis Snap Deploy version 4569, which stemmed from the inclusion of a DLL hijacking vulnerability leading to local elevation of privilege...

PT-2024-7876

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 13.7 through 17.1.7 GitLab CE/EE versions 17.2 through 17.2.5 GitLab CE/EE versions 17.3 through 17.3.2 Description An issue has been discovered in GitLab CE/EE that may have allowed an attacker with a victim's CI JOB TOK...

Acronis Snap Deploy 代码问题漏洞

Acronis Snap Deploy is a platform for bulk deployment of system images from Acronis Singapore. A code issue vulnerability previously existed in Acronis Snap Deploy version 4569, which stemmed from the inclusion of a DLL hijacking vulnerability leading to local elevation of privilege...

CVE-2024-20413

A vulnerability in Cisco NX-OS Software could allow an authenticated, local attacker with privileges to access the Bash shell to elevate privileges to network-admin on an affected device. This vulnerability is due to insufficient security restrictions when executing application arguments from the...

The vulnerability of the Citrix Workspace App for Windows lies in its insecure handling of privileges, allowing an attacker to elevate their privileges to the SYSTEM level.

The vulnerability of the Citrix Workspace App for Windows relates to insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate their privileges to the SYSTEM level...