PT-2019-2424

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in handling objects in memory within the Win32k component of the Windows operating system. It allows an attacker to potentially elevate their privileges and...

PT-2019-2500

Name of the Vulnerable Software and Affected Versions Windows Audio service affected versions not specified Description The issue is related to errors in privilege management within the Windows Audio service of Windows operating systems. It allows an attacker to potentially elevate their privileg...

Microsoft Windows Kernel Elevation of Privilege (CVE-2019-1041)

An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2019-5241: Undefined Security Weakness

There is a privilege escalation vulnerability in Huawei PCManager versions earlier than PCManager 9.0.1.50. The attacker can tricking a user to install and run a malicious application to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege...

HPE Intelligent Management Center (IMC) Elevation of Privilege Vulnerability

HPE Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Failure, Configuration, Accounting, Performance and Security FCAPS model. An elevation of privilege vulnerability exists in HPE Intelligent Management Center IMC 7.3 E0506P09 and...

PT-2019-6078

Name of the Vulnerable Software and Affected Versions PaperCut MF and NG versions 18.3.8 and earlier PaperCut MF and NG versions 19.0.3 and earlier Description The issue is related to an unspecified vulnerability in the application server of PaperCut MF and NG, which allows remote attackers to...

CVE-2019-11987

A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...

PT-2019-12620

Name of the Vulnerable Software and Affected Versions HPE Smart Update Manager versions prior to 8.4 Description A security issue in HPE Smart Update Manager could allow local unauthorized elevation of privilege. Recommendations For versions prior to 8.4, update to version 8.4 or later to resolve...

Cross site request forgery (csrf)

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...

CVE-2019-9883: Cross-Site Request Forgery (CSRF)

Multi modules of MailSherlock MSR35 and MSR45 lead to a CSRF vulnerability. It allows attacker to elevate privilege of specific account via useradmin/cfnew.cgi?chief=&wkgroup=full&cfname=test&cfaccount=test&cfemail=&cfacl=Management&applylang=&dn= without any authorizes...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM PureApplication System (January 2019 updates)

Summary Multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 6 and 7, used by the IBM PureApplication System were disclosed as part of the IBM Java SDK updates in January 2019. IBM PureApplication System has addressed the vulnerabilities. Vulnerability Details CVEID: CVE-2018-18...

CVE-2018-4048

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

CVE-2018-4048: Exposure of Resource to Wrong Sphere

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

PT-2019-10778

Name of the Vulnerable Software and Affected Versions GOG Galaxy version 1.2.48.36 Description A local privilege elevation issue exists in the file system permissions of the Temp directory. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this issue and execute...

Security Bulletin: Vulnerabilities in IBM Java SDK (January 2019) affecting IBM Application Delivery Intelligence for IBM Z V5.1.0, V5.0.5 and V5.0.4

Summary Multiple vulnerabilities are identified in IBM® SDK Java™ Technology Edition Version 1.7 and Version 1.8 that are used by IBM Application Delivery Intelligence for IBM Z V5.1.0, V5.0.5, and V5.0.4 respectively. These issues were disclosed as part of the IBM Java SDK updates in January 201...

FreeBSD rtld execl elevation of privilege vulnerability (CNVD-2019-15522)

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. An elevation of privilege vulnerability exists in the rtld function of Run-Time Link-Editor rtld in libexec/rtld-elf/rtld.c in FreeBSD versions 7.1 and 8.0. The vulnerability stems from a lack of effective...

CVE-2018-7842

A CWE-290: Authentication Bypass by Spoofing vulnerability exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium which could cause an elevation of privilege by conducting a brute force attack on Modbus parameters sent to the controller...

Intel TXE and Intel Converged Security and Management Engine Privilege Permission and Access Control Issues Vulnerabilities

Intel Converged Security and Management Engine CSME and Intel TXE are both products of Intel Corporation, U.S.A. Intel Converged Security and Management Engine is a security management engine. Intel TXE is a trust execution engine with hardware authentication capabilities for use in CPUs central...

Intel PROSet/Wireless WiFi Software Privilege License and Access Control Issues Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel USA. Intel PROSet/Wireless WiFi Software is vulnerable to a privilege permission and access control issue. The vulnerability stems from a lack of effective privilege-granting and access-control measures in a network...

CVE-2019-0707: Out-of-bounds Write

An elevation of privilege vulnerability exists in the Network Driver Interface Specification NDIS when ndis.sys fails to check the length of a buffer prior to copying memory to it.To exploit the vulnerability, in a local attack scenario, an attacker could run a specially crafted application to...