CVE-2024-40781

The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7.6, macOS Sonoma 14.6, macOS Ventura 13.6.8. A local attacker may be able to elevate their privileges...

CVE-2024-40781

CVE-2024-40781 is an Apple macOS local privilege escalation fixed by updated checks in macOS Sonoma 14.6, macOS Monterey 12.7.6, and macOS Ventura 13.6.8. The connected documents note that a local attacker could elevate privileges due to these checks, but do not provide additional technical detai...

Comodo Internet Security Pro 安全漏洞

Comodo Internet Security Pro is an Internet security suite from Comodo, USA. A security vulnerability exists in Comodo Internet Security Pro that stems from a link-tracking local elevation of privilege vulnerability in the cmdagent executable. An attacker can exploit this vulnerability to elevate...

Lenovo XClarity Controller 安全漏洞

Lenovo XClarity Controller Lenovo XCC is a server-embedded management engine from Lenovo China that is used to standardize and automate basic server management tasks. A security vulnerability exists in Lenovo XClarity Controller. An attacker can exploit the vulnerability to elevate privileges...

Absolute Secure Access 安全漏洞

Absolute Secure Access is an application from Absolute, Inc. to provide Secure Service Edge SSE optimized for hybrid and mobile working models. A security vulnerability exists in versions prior to Absolute Secure Access 13.07 that stems from an elevation of privilege vulnerability in the server a...

PT-2024-29123 · Unknown · Absolute Secure Access

Name of the Vulnerable Software and Affected Versions: Absolute Secure Access versions prior to 13.07 Description: The issue is related to an elevation of privilege vulnerability in server and client components. Attackers with local access and valid desktop user credentials can elevate their...

Huawei EMUI和Huawei HarmonyOS 安全漏洞

Huawei EMUI and Huawei HarmonyOS are both products of Huawei, a Chinese company.Huawei EMUI is a mobile operating system based on Android.Huawei HarmonyOS is an operating system... An elevation of privilege vulnerability exists in Huawei EMUI and Huawei HarmonyOS, which stems from improper...

CVE-2024-38176

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

CVE-2024-38164

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...

CVE-2024-38176

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

CVE-2024-38164

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...

CVE-2024-38164

The CVE-2024-38164 entry concerns an improper access control in GroupMe that could allow an unauthenticated attacker, by convincing a user to click a malicious link, to escalate privileges over the network. Affected product: GroupMe (GroupMe mobile/app context implied). Vulnerable component/conte...

CVE-2024-38164 GroupMe Elevation of Privilege Vulnerability

...

GroupMe Elevation of Privilege Vulnerability

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

CVE-2024-38176: Improper Restriction of Excessive Authentication Attempts

An improper restriction of excessive authentication attempts in GroupMe allows a unauthenticated attacker to elevate privileges over a network...

Zyxel WBE660S 安全漏洞

The Zyxel WBE660S is a wireless access point from China Hopkins Zyxel. A security vulnerability exists in the Zyxel WBE660S that stems from an incorrect privilege management vulnerability that could allow an authenticated user to elevate privileges and download configuration files on vulnerable...

CVE-2024-38164: Improper Access Control

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network by convincing a user to click on a malicious link...

CVE-2024-30473

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...

CVE-2024-30473

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...

CVE-2024-30473

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...