Improper Handling of Insufficient Privileges (Leaky Vessels)

Overview Affected versions of this package are vulnerable to Improper Handling of Insufficient Privileges Leaky Vessels via APIs for running interactive containers based on built images. It is possible to use these APIs to ask BuildKit to run a container with elevated privileges. Normally, runnin...

About the security content of macOS Ventura 13.6.3

About the security content of macOS Ventura 13.6.3 This document describes the security content of macOS Ventura 13.6.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

The vulnerability of the SetupAsusServices module in the software for managing and configuring connected devices from Asus Armoury Crate allows a hacker to gain increased privileges.

The vulnerability of the SetupAsusServices module in the software for managing and configuring connected devices in Asus Armoury Crate is related to the absence of quotation marks in the wording of certain elements or search paths. Exploiting this vulnerability can allow an attacker to gain...

CVE-2021-3187: Incorrect Default Permissions

An issue was discovered in BeyondTrust Privilege Management for Mac before 5.7. An authenticated, unprivileged user can elevate privileges by running a malicious script that executes as root from a temporary directory during install time. This applies to macOS before 10.15.5, or Security Update...

CVE-2023-35618

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

USN-6463-2: Open VM Tools vulnerabilities

USN-6463-1 fixed vulnerabilities in Open VM Tools. This update provides the corresponding updates for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. Original advisory details: It was discovered that Open VM Tools incorrectly handled SAML tokens. A remote attacker with Guest Operations privileges could...

Google Android elevation of privilege vulnerability (CNVD-2024-07126)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability due to an out-of-bounds write in CreateAudioBroacast in the broadcaster.cc script. An attacker can exploit this vulnerability to gain elevated privileges o...

Google Android suffers from unspecified vulnerability (CNVD-2023-9749629)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause elevation of privilege...

CVE-2023-21402

CVE-2023-21402 affects the PowerVR GPU driver (Imagination Technologies) in Android/ChromeOS via the MMU_UnmapPages() function in mmu_common.c. The issue is an out-of-bounds read caused by improper input validation, enabling local escalation of privilege in the kernel with no user interaction req...

Connectize G6 AC2100 Security Vulnerability

The Connectize G6 AC2100 is a wireless router from Connectize. A security vulnerability exists in the Connectize G6 AC2100 version 641.139.1.1256, which stems from a mismanagement of credentials issue that allows an attacker to elevate privileges...

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a vulnerability in Framework that could lead to elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

Progress MOVEit Transfer Security Vulnerability

Progress MOVEit Transfer is a secure hosted file transfer application from Progress. A security vulnerability exists in Progress MOVEit Transfer that stems from the presence of an elevation of privilege vulnerability. Affected products and versions: Progress MOVEit Transfer versions prior to...

Apache Superset - Elevation of Privilege

Overview An attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. Details On a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords. Modification of...

Dell OS Recovery Tool Access Control Error Vulnerability (CNVD-2024-3742694)

Dell OS Recovery Tool is an operating system recovery tool from Dell USA. An Access Control Error vulnerability exists in Dell OS Recovery Tool versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0, which stems from the presence of improper access control. A locally authenticated, non-administrator...

Cross site request forgery (csrf)

The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. This is due to missing nonce validation in the 'adminpage', 'userproverifyuser' and 'verifyUnverifyAllUsers' functions. This makes it possible for unauthenticated attackers to...

CVE-2023-2440: Cross-Site Request Forgery (CSRF)

The UserPro plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.1.1. This is due to missing nonce validation in the 'adminpage', 'userproverifyuser' and 'verifyUnverifyAllUsers' functions. This makes it possible for unauthenticated attackers to...

CVE-2023-20274

A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient permissions that are set by the PHP Agent Installer on the PHP Agent install directory. An...

CVE-2023-39259

Dell OS Recovery Tool (versions 2.2.4013, 2.3.7012.0, 2.3.7515.0) contains an improper access control vulnerability that could allow a locally authenticated non-administrator user to elevate privileges. Several connected sources describe this as a local-privilege-elevation issue arising from insu...

CVE-2023-39259

Dell OS Recovery Tool, versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability, leading to the elevation of privilege on the system...