PT-2019-1179

Name of the Vulnerable Software and Affected Versions Juniper Networks Juniper ATP version 5.0 prior to 5.0.3 Description The issue is related to hard-coded credentials in the Web Collector instance of Juniper ATP, allowing an attacker to gain full control of the software. The vulnerability can b...

SAP Enterprise Financial Services Remote Authorization Bypass Vulnerability

SAP Enterprise Financial Services is a set of enterprise financial services solutions from SAP. A remote authorization bypass vulnerability exists in SAP Enterprise Financial Services, which can be exploited by a remote attacker to elevate privileges due to a program's failure to perform required...

KioWare Server Elevation of Privilege Vulnerability

KioWare is a suite of self-service terminal browser software. The software has the ability to restrict end-user access to specific interfaces. A security vulnerability exists in KioWare Server 4.9.6 and prior versions. An attacker can exploit this vulnerability by replacing the KWSService service...

CVE-2019-0571

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

CVE-2019-0570

An elevation of privilege vulnerability exists when the Windows Runtime improperly handles objects in memory, aka "Windows Runtime Elevation of Privilege Vulnerability." This affects Windows Server 2012 R2, Windows RT 8.1, Windows Server 2012, Windows Server 2019, Windows Server 2016, Windows 8.1...

CVE-2019-0572

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

CVE-2019-0571

An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vulnerability." This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers. This CVE ID is...

Microsoft Edge Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object. An attacker who successfully exploited the vulnerability could use the Browser Broker COM object to elevate privileges on an affected system. This vulnerability by itself does not allow arbitrary code...

PT-2019-1167 · Microsoft · Skype

Name of the Vulnerable Software and Affected Versions: Skype versions 8.35 Description: The issue is related to errors in handling specific authentication requests, which can allow an attacker to bypass screen lock and access protected information. This is an elevation of privilege issue that...

PT-2018-2328

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue in Astra Linux's dbus package is related to the possibility of a root user with low integrity level connecting to the session bus of a root user with high integrity level. This...

NVIDIA GeForce Experience Privilege Escalation

The vulnerability of NVIDIA GeForce Experience software is due to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud

Summary There is a potential cross-site scripting vulnerability with the Installation Verification Tool of IBM WebSphere Application Server. There is a potential cross-site scripting vulnerability in the Cache Monitor web application in WebSphere Application Server. There is a potential code...

Intel System Defense Utility Elevation of Privilege Vulnerability

Intel System Defense Utility is a tool from Intel Corporation USA for remotely configuring the security of PCs supporting Intel vPro technology. The product is mainly used for security configuration of Intel vPro features and SMB environments. An elevation of privilege vulnerability exists in the...

Multiple Siemens Product Privilege Access Control Vulnerabilities

Siemens SINUMERIK 808D and so on are the German Siemens Siemens company's CNC machine tool system controller. A privilege access control vulnerability exists in Siemens SINUMERIK CNC Controller. A local attacker could exploit this vulnerability to elevate privileges...

PT-2018-2055

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Windows Server 2019 affected versions not specified Windows Server 2016 affected versions not specified Windows 10 affected versions not specified Windows 10 Servers affected versions not...

Google Android L2TP Component Privilege Permission and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, of which L2TP is an L2TP Internet Tunneling Protocol component. A boost vulnerability exists in the L2TP component in Android. A local attacker can exploit this vulnerability to...

Google Android Easel Component Permission License and Access Control Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which Easel is a component. An elevation vulnerability exists in the Easel component of Android. A local attacker can exploit this vulnerability to elevate privileges write out...

Google Android out-of-bounds write vulnerability (CNVD-2019-01564)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An out-of-bounds write vulnerability exists in l2clccprocpdu in l2cfcr.cc in Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. The vulnerability stems from a lack of...

Apple iOS, tvOS and macOS Mojave Kernel Elevation of Privilege Vulnerability

Apple iOS, tvOS, and macOS Mojave are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is an operating system for smart TVs; and macOS Mojave is a specialized operating system for Mac computers. kernel is a component of the Kernel is one of the kernel components. A...

Google Android out-of-bounds write vulnerability (CNVD-2019-01566)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An out-of-bounds write vulnerability exists in rwt2thandletlvdetect in rwt2tndef.cc in Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, and 9. The vulnerability stems from a...