CVE-2020-12639

CVE-2020-12639 affects phpList prior to 3.5.3. The vulnerability is a cross-site scripting flaw in the lists/admin/template.php endpoint that can lead to privilege elevation. Affected component/file: lists/admin/template.php; underlying issue: XSS in phpList before 3.5.3. Documented impact includ...

CVE-2020-12639

phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php...

CVE-2020-12639: Improper Neutralization of Input During Web Page Generation

phpList before 3.5.3 allows XSS, with resultant privilege elevation, via lists/admin/template.php...

Internet Download Manager Stack Buffer Overflow Vulnerability

Internet Download Manager is a download utility that offers a variety of features such as breakpoint transfer. A stack buffer overflow vulnerability exists in Internet Download Manager. An attacker can corrupt the file system by elevating the privileges of a local process...

IBM UrbanCode Deploy elevation of privilege vulnerability (CNVD-2020-27949)

IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...

NETGEAR Elevation of Privilege Vulnerability

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A security vulnerability exists in several NETGEAR products. An attacker could exploit the vulnerability to elevate privileges...

Elevation of privilege vulnerabilities in multiple NETGEAR products

NETGEAR M4300-28G and others are a managed switch from NETGEAR, Inc. A security vulnerability exists in several NETGEAR products. An attacker could exploit the vulnerability to elevate privileges...

IBM InfoSphere Information Server Elevation of Privilege Vulnerability (CNVD-2020-24015)

IBM InfoSphere Information Server is a set of data integration platforms from IBM in the United States. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server versions 11.3, 11.5, and 11.7. An...

Microsoft Visual Studio Extension Installer Service Elevation of Privilege Vulnerability

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio Extension Installer Servic...

Microsoft Windows Graphics Components Privilege Mobilization Vulnerability (CNVD-2020-25580)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Graphics Components is one of the graphics components. An elevation of privilege...

Microsoft AutoUpdate for Mac Privilege Vulnerability

Microsoft AutoUpdate for Mac is an automatic update component for Mac. An elevation of privilege vulnerability exists in Microsoft AutoUpdate for Mac, which originates when the program fails to properly validate updates before executing them, and can be exploited by an attacker with the help of...

Microsoft Windows Defender Antimalware Platform Elevation of Privilege Vulnerability

Microsoft Windows Defender Antimalware Platform is a suite of anti-malware platforms from Microsoft USA. A security vulnerability exists in Microsoft Windows Defender Antimalware Platform, which stems from the program's inability to handle hard-coded links. An attacker could exploit the...

Microsoft Windows Kernel Privilege Mobilization Vulnerability (CNVD-2020-25583)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Windows Kernel is one of the Windows system kernels. An elevation of privilege vulnerabili...

Intel Modular Server MFS2600KISPP Compute Module Elevation of Privilege Vulnerability

Intel Modular Server MFS2600KISPP Compute Module is a computing module from Intel Corporation USA. A security vulnerability exists in Intel Modular Server MFS2600KISPP Compute Module. An attacker in close physical proximity could exploit the vulnerability to elevate privileges...

Improper access control

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges...

CVE-2020-1017

An elevation of privilege vulnerability exists in the way the Windows Push Notification Service handles objects in memory, aka 'Windows Push Notification Service Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-0940, CVE-2020-1001, CVE-2020-1006...

Microsoft Windows Multiple Vulnerabilities (KB4549951)

This host is missing a critical security update according to Microsoft KB4549951 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-11666: Undefined Security Weakness

CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges...

CVE-2020-11799: Improper Privilege Management

Z-Cron 5.6 Build 04 allows an unprivileged attacker to elevate privileges by modifying a privileged user's task. This can also affect all users who are signed in on the system if a shell is placed in a location that other unprivileged users have access to...

Microsoft Windows Multiple Vulnerabilities (KB4549949)

This host is missing a critical security update according to Microsoft KB4549949 SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...