CVE-2024-30473

Dell EMC Elastic Cloud Storage (ECS) is affected by a privilege-elevation vulnerability in the user management component for versions prior to 3.8.1. According to multiple sources, a remote attacker with high privileges could potentially exploit this flaw to access unauthorized endpoints. The lik...

CVE-2024-30473: Improper Privilege Management

Dell ECS, versions prior to 3.8.1, contain a privilege elevation vulnerability in user management. A remote high privileged attacker could potentially exploit this vulnerability, gaining access to unauthorized end points...

CVE-2024-20296: Unrestricted Upload of File with Dangerous Type

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit this vulnerability, an attacker would need at least valid Policy Admin credentials on the affected...

CVE-2024-5913 PAN-OS: Improper Input Validation Vulnerability in PAN-OS

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges...

CVE-2024-5913

CVE-2024-5913 affects Palo Alto Networks PAN-OS. The issue is an improper input validation in PAN-OS software that enables an attacker with the ability to tamper with the physical file system to elevate privileges. The vulnerability is associated with a physical-access attack vector and has MEDIU...

CVE-2024-5913 PAN-OS: Improper Input Validation Vulnerability in PAN-OS

An improper input validation vulnerability in Palo Alto Networks PAN-OS software enables an attacker with the ability to tamper with the physical file system to elevate privileges...

Microsoft Windows Multiple Vulnerabilities (KB5040434, Blast-RADIUS)

This host is missing an important security update according to Microsoft KB5040434 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2024-7862 · Microsoft · Windows Dwm Core Library +3

Name of the Vulnerable Software and Affected Versions: Windows DWM Core Library versions prior to the fixed version Description: The issue is related to an elevation of privilege vulnerability in the Windows DWM Core Library, which can be exploited to allow an attacker to gain system-level...

Microsoft Windows Multiple Vulnerabilities (KB5040427, Blast-RADIUS)

This host is missing an important security update according to Microsoft KB5040427 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-38052 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-38033 PowerShell Elevation of Privilege Vulnerability

...

CVE-2024-38054 Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability

...

CVE-2024-23663

CVE-2024-23663 describes an improper access-control flaw in Fortinet FortiExtender, allowing an attacker to create users with elevated privileges via a crafted HTTP request. Affected FortiExtender versions span 4.1.1–4.1.9, 4.2.0–4.2.6, 5.3.2, 7.0.0–7.0.4, 7.2.0–7.2.4, and 7.4.0–7.4.2. Public dis...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. An elevation of privilege vulnerability exists in Google Android Framework due to an error in a framework component that can be exploited by an attacker to gain elevated privileges on the system...

WatchGuard Mobile VPN Command Injection Vulnerability

WatchGuard Mobile VPN is a VPN application from US-based WatchGuard. A security vulnerability exists in WatchGuard Mobile VPN with SSL version 12.10 and earlier, which stems from the presence of a local elevation of privilege vulnerability that could allow an attacker to execute arbitrary command...

PT-2024-4982 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension versions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension for Windows, caused by incorrect linking before...

PT-2024-27946 · Ibm · Ibm System Management For I

Name of the Vulnerable Software and Affected Versions: IBM System Management for i versions 7.2 through 7.4 Description: The issue allows a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrat...

CVE-2024-35137

IBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to possibly elevate their privileges due to sensitive configuration information being exposed. IBM X-Force ID: 292413...

IBM MQ 安全漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An elevation of privilege vulnerability exists in IBM MQ, which can be exploited...