5236 matches found
PT-2020-5272 · Microsoft · Windows Backup Engine +1
Name of the Vulnerable Software and Affected Versions: Windows Backup Engine affected versions not specified Description: The issue is related to insecure privilege management in the Windows Backup Engine component of the Windows operating system. Exploitation of this issue may allow an attacker ...
PT-2020-5235 · Microsoft · Directx +1
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the DirectX Graphics Kernel DXGKRNL driver of Windows operating systems. Exploitation of this issue may allow an attacker to elevate...
CVE-2020-28950
The installer of Kaspersky Anti-Ransomware Tool KART prior to KART 4.0 Patch C was vulnerable to a DLL hijacking attack that allowed an attacker to elevate privileges during installation process...
CVE-2020-13542
A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing...
CVE-2020-13542
A local privilege elevation vulnerability exists in the file system permissions of LogicalDoc 8.5.1 installation. Depending on the vector chosen, an attacker can either replace the service binary or replace DLL files loaded by the service, both which get executed by a service thus executing...
CVE-2020-13542
CVE-2020-13542 is a local privilege escalation in LogicalDoc 8.5.1 caused by insecure file-system permissions that allow replacing the service binary or loaded DLLs. This leads to arbitrary code execution with SYSTEM privileges when the service runs. TALOS details show the vulnerability affects t...
CVE-2020-29378
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user to full administrative access by using the password !j@ly$z%x6x7q8c9z for the...
Command injection
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user to full administrative access by using the password !j@ly$z%x6x7q8c9z for the...
Cisco SD-WAN Software Elevation of Privilege Vulnerability
Cisco SD-WAN vManage is software from Cisco that provides software-defined networking capabilities. The software is a way to virtualize the network.Cisco SD-WAN vEdge is a router from Cisco. The device provides basic WAN, security and multi-cloud capabilities for Cisco SD-WAN solutions. An...
VestaCP v0.9.8-26 - (LoginAs) Token Session Vulnerability
Document Title: =============== VestaCP v0.9.8-26 - LoginAs Token Session Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2240 Release Date: ============= 2020-11-26 Vulnerability Laboratory ID VL-ID: ====================================...
Xen Denial of Service Vulnerability (CNVD-2021-44718)
Xen is an open source virtual machine monitor product. A denial of service vulnerability exists in Xen 4.14. and earlier versions that stems from the presence of a difference-one error that can be exploited by users of x86 HVM client operating systems to cause a denial of service, data leakage, a...
Trend Micro Security 2020 Local Elevation of Privilege Vulnerability (CNVD-2020-73786)
Trend Micro Security 2020 is a suite of computer security protection software from Trend Micro. Trend Micro Security 2020 Consumer has a security vulnerability that can be exploited by an attacker by placing a malicious DLL in an unprotected location and high privileges symbolic link attack, whic...
The vulnerability of the Intel High Definition Audio technology lies in privilege management errors, which allow attackers to elevate their privileges.
The vulnerability of the Intel High Definition Audio technology is related to privilege management errors. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2020-28421
CA Unified Infrastructure Management 20.1 and earlier contains a vulnerability in the robot controller component that allows local attackers to elevate privileges...
Broadcom CA Unified Infrastructure Management 安全漏洞
CA Unified Infrastructure Management is a powerful unified IT monitoring solution that helps organizations deliver reliable, flexible IT services. An elevation of privilege vulnerability exists in the controller component in CA Unified Infrastructure Management 20.1 and earlier versions, which ca...
Design/Logic Flaw
Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a nonexistent library file, allowing under certain conditions one to gain code execution and elevation of privileges to the level of privilege held by the vulnerable component such as NT...
Elevation of Privilege Vulnerability in GBase 8s Database of Tianjin Nanda General Data Technology Co.
GBase 8s is a mature and stable enterprise-level domestic transactional database independently developed by Tianjin Nanda General Data Technology Co. A privilege elevation vulnerability exists in the gbase 8s database of Tianjin Nanda General Data Technology Co. Ltd, which can be exploited by...
CVE-2020-17075
Windows USO Core Worker Elevation of Privilege Vulnerability...