CloudCTI HIP Integrator Recognition Configuration Tool Elevation of Privilege Vulnerability

CloudCTI HIP Integrator Recognition Configuration Tool is an integrator recognition configuration tool from CloudCTI, Netherlands. A security vulnerability exists in the CloudCTI HIP Integrator Recognition Configuration Tool that originates from an elevated privilege process that can execute...

PT-2019-4401

Name of the Vulnerable Software and Affected Versions ZyXEL P-1302-T10D v3 devices with firmware version 2.00ABBX.3 and earlier Description The issue is related to inadequate access control in the firmware of the ZyXEL P-1302-T10D v3 router. This could allow an unauthorized user to access certain...

PT-2019-5739

Name of the Vulnerable Software and Affected Versions Zyxel P1302-T10 v3 version 2.00ABBX.3 and earlier Description The issue is related to an insecure direct object reference vulnerability that allows attackers to gain privileges and access certain admin pages. This vulnerability is associated...

Design/Logic Flaw

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution...

CVE-2019-17043

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the best1collect.exe SUID binary could allow an attacker to elevate his/her privileges to the ones of the "patrol" user by specially crafting a shared library .so file that will be loaded during execution...

CVE-2019-9745

CVE-2019-9745 affects the CloudCTI HIP Integrator Recognition Configuration Tool. The vulnerability arises in the EXQUISE integration: a lower-privileged user can craft the data sent over an insecure Named Pipe (RUCS20151029) to the Recognition Update Client Service (running as NT AUTHORITY\SYSTE...

CVE-2019-17044: Incorrect Default Permissions

An issue was discovered in BMC Patrol Agent 9.0.10i. Weak execution permissions on the PatrolAgent SUID binary could allow an attacker with "patrol" privileges to elevate his/her privileges to the ones of the "root" user by specially crafting a shared library .so file that will be loaded during...

CVE-2019-2215

A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious local application or a separate vulnerability in a network...

CVE-2019-1341

An elevation of privilege vulnerability exists when umpo.dll of the Power Service, improperly handles a Registry Restore Key function, aka 'Windows Power Service Elevation of Privilege Vulnerability'...

CVE-2019-1323

An elevation of privilege vulnerability exists in the Microsoft Windows Update Client when it does not properly handle privileges, aka 'Microsoft Windows Update Client Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1336...

Juniper Networks Junos OS Elevation of Privilege Vulnerability (CNVD-2020-13539)

Junos is the common operating system that runs on Juniper Networks' routing, switching, and security products. An elevation of privilege vulnerability exists in the Veriexec subsystem of Juniper Networks Junos OS, which can be exploited by a locally authenticated attacker to take full control of...

CVE-2019-0071

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrit...

Authentication flaw

Veriexec is a kernel-based file integrity subsystem in Junos OS that ensures only authorized binaries are able to be executed. Due to a flaw in specific versions of Junos OS, affecting specific EX Series platforms, the Veriexec subsystem will fail to initialize, in essence disabling file integrit...

Design/Logic Flaw

A vulnerability in the Veriexec subsystem of Juniper Networks Junos OS allowing an attacker to fully compromise the host system. A local authenticated user can elevate privileges to gain full control of the system even if they are specifically denied access to perform certain actions. This issue...

Windows Error Reporting Manager Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Windows Error Reporting manager improperly handles hard links. An attacker who successfully exploited this vulnerability could overwrite a targeted file leading to an elevated status. To exploit this vulnerability, an attacker would first have t...

PT-2019-3514

Name of the Vulnerable Software and Affected Versions Windows CloudStore affected versions not specified Description The issue is related to improper handling of file Discretionary Access Control List DACL by Windows CloudStore, which can lead to an elevation of privilege. This can be exploited b...

PT-2019-3961

Name of the Vulnerable Software and Affected Versions Sunny WebBox Firmware versions 1.6 and prior Description The issue allows remote attackers to perform actions with the permissions of the user. This can be achieved by sending a malicious link to an authenticated operator. The device's use of ...

Microsoft Windows and Microsoft Windows Server IIS Server Privilege Elevation Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems.IIS Server is one of the IIS Internet Information Services servers...

PT-2019-3526

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Microsoft SharePoint Foundation affected versions not specified Microsoft SharePoint Enterprise Server affected versions not specified Description The issue is related to insufficient...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect WebSphere Application Server shipped with IBM Security Key Lifecycle Manager (SKLM) July 2019 CPU

Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition that is shipped with IBM WebSphere Application Server. These might affect some configurations of IBM WebSphere Application Server Traditional. Vulnerability Details Please consult the security bulletin Security...