6614 matches found
Microsoft Edge Resource Management Error Vulnerability (CNVD-2024-36736)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a resource management error vulnerability that stems from an attacker's ability to elevate privileges by exploiting the vulnerability. No details of the...
Google Android elevation of privilege vulnerability (CNVD-2024-36096)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to elevate privileges...
CVE-2024-38175
An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network...
CVE-2024-38175
CVE-2024-38175 affects Microsoft Azure Managed Instance for Apache Cassandra. The vulnerability is an improper access control that allows an authenticated attacker to elevate privileges over the network. Product: Azure Managed Instance for Apache Cassandra (Azure MI Cassandra). Root cause: access...
CVE-2024-38175: Improper Access Control
An improper access control vulnerability in the Azure Managed Instance for Apache Cassandra allows an authenticated attacker to elevate privileges over a network...
Kanister 安全漏洞
Kanister is a data protection workflow management tool from Kanister Open Source. A security vulnerability exists in Kanister that stems from a cluster-level privilege elevation that can be performed by a malicious user by accessing a worker node...
PT-2024-5819
Name of the Vulnerable Software and Affected Versions Azure Managed Instance for Apache Cassandra affected versions not specified Description The issue is related to improper access control in the Azure Managed Instance for Apache Cassandra, which can allow an authenticated attacker to elevate...
CVE-2024-43472
Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...
Exploit for Out-of-bounds Write in Microsoft
Windows DWM Core Library Elevation of Privilege Vulnerability...
Siemens SCALANCE M-800 Series Configuration Error Vulnerability
SCALANCE M-800, MUM-800, S615, RUGGEDCOM RM1224 are all industrial routers. A misconfiguration vulnerability exists in the Siemens SCALANCE M-800 series that stems from not properly enforcing isolation between user sessions in its web server component, which can be exploited by an authenticated,...
Intel Integrated Performance Primitives Cryptography 安全漏洞
Intel Integrated Performance Primitives Cryptography Intel Ipp Cryptography is a library of secure, fast, and lightweight cryptographic building blocks from Intel Corporation USA. A security vulnerability exists in Intel Integrated Performance Primitives Cryptography versions prior to 2021.11 tha...
Microsoft Windows Multiple Vulnerabilities (KB5041782)
This host is missing a critical security update according to Microsoft KB5041782 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Microsoft Windows Multiple Vulnerabilities (KB5041592)
This host is missing an important security update according to Microsoft KB5041592 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2024-38109
CVE-2024-38109 – Azure Health Bot Elevation of Privilege is an authenticated SSRF vulnerability in Microsoft Azure Health Bot that can allow an attacker to elevate privileges over a network. The vulnerability is documented in Microsoft’s advisory (CVE-2024-38109) and is referenced in multiple fee...
CVE-2024-38134 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability
...
CVE-2024-38134
Technical details about CVE-2024-38134 (Kernel Streaming WOW Thunk Service Driver Elevation of Privilege) are not provided in the included documents. Monitor for updates from Microsoft and CVE databases for affected products, remediation, and known exploits.
CVE-2024-41939
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application...
CVE-2024-41939
Siemens SINEC NMS (all versions
CVE-2024-41939
A vulnerability has been identified in SINEC NMS All versions V3.0. The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the application...
