6599 matches found
CVE-2023-26295
HP Device Manager (HPDM) versions prior to 5.0.10 are affected by a vulnerability allowing command injection and/or elevation of privileges. The issue is tied to HPDM before version 5.0.10 and is addressed by upgrading to HPDM 5.0.10 or later. HP’s security advisory HPSBHF03842 confirms fixes inc...
CVE-2023-26294
Previous versions of HP Device Manager prior to HPDM 5.0.10 could potentially allow command injection and/or elevation of privileges...
PT-2023-20594 · Hewlett Packard · Hp Device Manager
Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue potentially allows command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...
PT-2023-20593 · Hewlett Packard · Hp Device Manager
Name of the Vulnerable Software and Affected Versions: HP Device Manager versions prior to 5.0.10 Description: The issue potentially allows command injection and/or elevation of privileges. Recommendations: For versions prior to 5.0.10, update to version 5.0.10 or later to resolve the issue...
HP Device Manager 命令注入漏洞
HP Device Manager HPDM is a device manager from Hewlett-Packard HP in the United States. A security vulnerability exists in HP Device Manager versions prior to 5.0.10 that stems from the presence of a command execution or elevation of privilege vulnerability...
Yandex Navigator 安全漏洞
Yandex Navigator is a car navigation system from the Russian company Yandex for mobile devices running Android, iOS and Windows family of mobile operating systems. A security vulnerability exists in Yandex Navigator version v.6.60, which originates from an elevation of privilege that can be...
EulerOS 2.0 SP5 : tigervnc (EulerOS-SA-2023-2176)
According to the versions of the tigervnc packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory,...
RenderDoc 后置链接漏洞
RenderDoc is a standalone graphical debugger from the RenderDoc open source. RenderDoc 1.26 and earlier versions suffer from a backlink vulnerability that stems from allowing local elevation of privilege via a symbolic link attack...
CVE-2022-48181: Out-of-bounds Write
An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code...
CVE-2023-34097: Insertion of Sensitive Information into Log File
hoppscotch is an open source API development ecosystem. In versions prior to 2023.4.5 the database password is exposed in the logs when showing the database connection string. Attackers with access to read system logs will be able to elevate privilege with full access to the database. Users are...
South River Technologies TitanFTP NextGen 安全漏洞
South River Technologies TitanFTP NextGen South River Technologies Titan FTP NextGen is a natively supported cluster for high availability and failover SFTP/ FTP server. A security vulnerability exists in South River Technologies TitanFTP NextGen that stems from allowing vertical elevation of...
Oracle Linux 7 : qemu (ELSA-2023-12368)
The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12368 advisory. - qga/win32: Use rundll for VSS installation Konstantin Kostiuk Orabug: 35206108 CVE-2023-0664 - qga/win32: Remove change action from MSI installer...
CVE-2023-23953
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability...
CVE-2023-28066: Improper Access Control
Dell OS Recovery Tool, versions 2.2.4013 and 2.3.7012.0, contain an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this vulnerability in order to elevate privileges on the system...
CVE-2022-35757
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...
CVE-2022-35749
Windows Digital Media Receiver Elevation of Privilege Vulnerability...
The vulnerability of the microprogrammed software of the wireless VoIP router ICOM SR-7100VN, related to improper privilege assignment, allows a hacker to elevate their privileges.
The vulnerability of the microprogrammed software of the wireless VoIP router ICOM SR-7100VN is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
CVE-2023-29728
The Call Blocker application 6.6.3 for Android allows attackers to tamper with feature-related data, resulting in a severe elevation of privilege attack...
AndroidRock Call Blocker 安全漏洞
AndroidRock Call Blocker is an application from AndroidRock Inc. It can automatically reject unwanted calls. A security vulnerability exists in AndroidRock Call Blocker version 6.6.3, which stems from an elevation of privilege that allows an attacker to tamper with feature-related data...