Microsoft Windows COM Aggregate Marshaler Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 and others are operating systems released by Microsoft Corporation USA.Windows COM Aggregate Marshaler is one of the components. An elevation of privilege vulnerability exists in Microsoft Windows COM Aggregate Marshaler. An attacker can exploit this vulnerability an...

Cross site scripting

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access...

CVE-2018-3635

Insufficient input validation in installer in Intel Rapid Store Technology RST before version 16.7 may allow an unprivileged user to potentially elevate privileges or cause an installer denial of service via local access...

CVE-2018-3699

Cross-site scripting in the Intel RAID Web Console v3 for Windows may allow an unauthenticated user to elevate privilege via remote access...

CVE-2018-3699

CVE-2018-3699 is an Intel-affecting vulnerability in the Intel® RAID Web Console v3 for Windows. The issue is described as a cross-site scripting (XSS) vulnerability that may allow an unauthenticated user to elevate privileges via remote access. Affected product: Intel® RAID Web Console 3; vulner...

CVE-2018-8550

An elevation of privilege exists in Windows COM Aggregate Marshaler, aka "Windows COM Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Server 2012, Windows 8.1, Windows Server 2016, Windows...

CVE-2018-8554

An elevation of privilege vulnerability exists when DirectX improperly handles objects in memory, aka "DirectX Elevation of Privilege Vulnerability." This affects Windows 10 Servers, Windows 10, Windows Server 2019. This CVE ID is unique from CVE-2018-8485, CVE-2018-8561...

CVE-2018-8592

An elevation of privilege vulnerability exists in Windows 10 version 1809 when installed from physical media USB, DVD, etc, aka "Windows Elevation Of Privilege Vulnerability." This affects Windows 10, Windows Server 2019...

Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. To exploit the vulnerability, an attacker would need to execute a man-in-the-middle attack to...

IBM MQ Library Elevation of Privilege Vulnerability

IBM MQ formerly known as IBM WebSphere MQ is a messaging middleware product from IBM. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in the IBM MQ library. An attacker can exploit the vulnerability t...

Intel® RAID Web Console 3 Cross-site Scripting Vulnerability Advisory

Summary: A potential security vulnerability in the Intel® RAID Web Console RWC may allow remote manipulation of RWC console output. Intel is releasing RAID Web Console updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2018-3699 Description: Cross-site scripting i...

PT-2018-18587 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An elevation of privilege issue exists due to improper sanitization of specially crafted web requests to affected SharePoint servers. This could allow an attacker to...

D-LINK Central WifiManager CWM-100 Trojan File SYSTEM Elevation of Privilege Vulnerability

D-LINK Central WifiManager CWM-100 is D-LINK centralized wireless management software. D-Link Central WiFiManager CWM-100 1.03 r0098 device will load the Trojan horse "quserex.dll" and will create a new thread running SYSTEM integrity...

LiquidVPN For macOS Elevation of Privilege Vulnerability

LiquidVPN For MacOS is a VPN software for anonymous access to the Internet based on the MacOS platform. An elevation of privilege vulnerability exists in the 'openvpncmd' parameter in LiquidVPN For MacOS 1.37 and 1.36 and earlier versions. An attacker can exploit this vulnerability to gain elevat...

Design/Logic Flaw

The AsrDrv101.sys and AsrDrv102.sys low-level drivers in ASRock RGBLED before v1.0.35.1, A-Tuning before v3.0.210, F-Stream before v3.0.210, and RestartToUEFI before v1.0.6.2 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra

About the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra This document describes the security content of macOS Mojave 10.14.1, Security Update 2018-002 High Sierra, Security Update 2018-005 Sierra. About Apple security updates For o...

About the security content of watchOS 5.1

About the security content of watchOS 5.1 This document describes the security content of watchOS 5.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

About the security content of iCloud for Windows 7.4 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...

CVE-2018-8453

An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka "Win32k Elevation of Privilege Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2019, Windows Serv...

Adobe Technical Communications Suite DLL Load Local Elevation of Privilege Vulnerability

Adobe Technical Communications Suite is a set of information management suite from the American company Audobee Adobe. The product supports users to create, manage and publish technical documents, books and other content. A DLL load local elevation of privilege vulnerability exists in Adobe...