CVE-2017-0195

Microsoft Excel Services on Microsoft SharePoint Server 2010 SP1 and SP2, Microsoft Excel Web Apps 2010 SP2, Microsoft Office Web Apps 2010 SP2, Microsoft Office Web Apps Server 2013 SP1 and Office Online Server allows remote attackers to perform cross-site scripting and run script with local use...

CVE-2017-0166

An elevation of privilege vulnerability exists in Windows when LDAP request buffer lengths are improperly calculated. In a remote attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to send malicious traffic to a Domain Controller, aka "LDAP...

Information Disclosure And Elevation Of Priveleges

Loopback is vulnerable to elevation of privilege attacks and information disclosure. This is possible because ACL relations are not enforced. This means that if a malicious user has user group relation, it may allow the group owner to view all user tokens in that group. They can then use that...

Microsoft Privilege Elevation And Information Disclosure Vulnerabilities (KB4015195)

This host is missing an important security update according to Microsoft security update KB4015195. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

PT-2017-1865 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Internet Explorer affected versions not specified Description: The issue is related to insufficient access control in Internet Explorer, allowing a remote attacker to elevate their privileges. This can enable the attacker to access informatio...

Local Elevation of Privilege Vulnerability in Multiple Cisco Products

Cisco Unified Computing System UCS Manager provides unified, embedded management of all software and hardware components in Cisco UCS. Cisco Firepower 4100 Series Next-Generation Firewall NGFW is the industry's first fully integrated, threat-oriented, next-generation firewall with unified...

CVE-2017-0578

An elevation of privilege vulnerability in the DTS sound driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A. Android...

CVE-2017-0579

An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions:...

CVE-2017-0567

CVE-2017-0567 refers to an elevation-of-privilege flaw in the Broadcom Wi‑Fi driver on Android, allowing a local malicious app to run arbitrary code in the kernel context. The issue is triggered after compromising a privileged process and affects Android devices with kernel versions 3.10 and 3.18...

CVE-2017-0566

An elevation of privilege vulnerability in the MediaTek camera driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: N/A...

Google Android elevation of privilege vulnerability (CNVD-2017-04555)

Android is a cell phone operating system based on the Linux open kernel. Google Android suffers from an elevation of privilege vulnerability in the CameraBase implementation, which can be exploited by an attacker to execute arbitrary code...

FortiClient SSLVPN Privilege Elevation Vulnerability

Fortinet FortiClient is a Fortinet endpoint security solution that provides end users with anti-virus, encryption and other services. An elevation of privilege vulnerability exists in FortiClient SSLVPN. An attacker can exploit this vulnerability to gain root privileges...

CVE-2016-8763

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to caus...

Design/Logic Flaw

In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources...

CVE-2014-3222

In Huawei eSpace Meeting with software V100R001C03SPC201 and the earlier versions, attackers that obtain the permissions assigned to common users can elevate privileges to access and set specific key resources...

CVE-2016-8763

The TrustZone driver in Huawei P9 phones with software Versions earlier than EVA-AL10C00B352 and P9 Lite with software VNS-L21C185B130 and earlier versions and P8 Lite with software ALE-L02C636B150 and earlier versions has an improper resource release vulnerability, which allows attackers to caus...

CVE-2016-8763

The CVE-2016-8763 issue affects Huawei TrustZone driver on Huawei P9 (pre EVA-AL10C00B352), P9 Lite (pre VNS-L21C185B130) and P8 Lite (pre ALE-L02C636B150). It is an improper resource release vulnerability that can cause a system restart or privilege elevation. Affected software versions are earl...

Multiple Vulnerabilities in Dahua IP Camera

Dahua IP Camera is a webcam from Dahua, China. An elevation of privilege and information disclosure vulnerability exists in Dahua IP Camera version 3.200.0001.6. An attacker can exploit this vulnerability by sending a specially crafted request to log into the IP Camera and gain full control of th...

Debian DLA-872-1 : xrdp security update

It was discovered that xrdp, a Remote Desktop Protocol RDP server, calls the PAM function authstartsession in an incorrect location, leading to PAM session modules not being properly initialized, with a potential consequence of incorrect configurations or elevation of privileges, aka a pamlimits....

Adups Local Elevation of Privilege Vulnerability

Adups Fota is a professional wireless upgrade solution for IoT devices smart car, wearable, home, VR, etc. from Shanghai Guangsheng Information Technology Co. Adups suffers from a local elevation of privilege vulnerability. The vulnerability is caused by setting the android: sharedUserId attribut...