Input validation

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode SMM...

CVE-2018-7941

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

Authentication flaw

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

CVE-2018-7941

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

CVE-2018-7941

CVE-2018-7941 concerns Huawei iBMC V200R002C60, where an authentication bypass vulnerability exists: a remote attacker with low privileges can craft specific messages to upload authentication certificates due to improper validation of upload authority, potentially enabling privilege elevation. Th...

CVE-2018-3612: Improper Input Validation

Intel NUC kits with insufficient input validation in system firmware, potentially allows a local attacker to elevate privileges to System Management Mode SMM...

PT-2018-16096

Name of the Vulnerable Software and Affected Versions Intel NUC kits affected versions not specified Description The issue is related to insufficient input validation in system firmware, which could allow a local attacker to elevate privileges to System Management Mode SMM. Recommendations At the...

Microsoft SharePoint Elevation of Privilege Vulnerability

Microsoft SharePoint Enterprise Server 2016 and SharePoint Foundation 2013 SP1 are both products of Microsoft Corporation USA.Microsoft SharePoint Enterprise Server 2016 is Microsoft SharePoint Enterprise Server 2016 is an enterprise business collaboration platform. The platform is used to...

CVE-2018-7941: Improper Authentication

Huawei iBMC V200R002C60 have an authentication bypass vulnerability. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege elevation...

PT-2018-18340

Name of the Vulnerable Software and Affected Versions: Huawei iBMC version V200R002C60 Description: The issue allows a remote attacker with low privilege to craft specific messages and upload an authentication certificate to the affected product. This is due to improper validation of the upload...

CVE-2018-8156

An elevation of privilege vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka "Microsoft SharePoint Elevation of Privilege Vulnerability." This affects Microsoft SharePoint, Microsoft Project Server...

PT-2018-2991

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 52.8 Firefox versions prior to 60 Description The issue allows a malicious site to bypass same-origin protections for the PDF viewer, potentially intercepting messages meant for the viewer. This could enable the...

Security Advisory - Authentication Bypass Vulnerability in Huawei iBMC Products

There is an authentication bypass vulnerability in Huawei iBMC products. A remote attacker with low privilege may craft specific messages to upload authentication certificate to the affected products. Due to improper validation of the upload authority, successful exploit may cause privilege...

PT-2018-2995

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 60 Firefox ESR affected versions not specified Description The issue is related to errors in privilege management. It may allow a remote attacker to elevate their privileges and execute arbitrary code. If an attacker...

Security Updates for Windows Server 2008 (May 2018)

The remote Windows host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the Credential Security Support Provider protocol CredSSP. An attacker who successfully exploits this vulnerability could relay user...

Google Android System elevation of privilege vulnerability (CNVD-2018-10693)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the System component of Google Android 7.0, 7.1.1, 7.1.2, 8.0, 8.1, which can be exploited by an attacker to elevate...

Google Android Qualcomm component elevation of privilege vulnerability (CNVD-2018-10681)

Android is a free and open source Linux-based operating system led and developed by Google Inc. and the Open Handset Alliance. An elevation of privilege vulnerability exists in the Google Android Qualcomm WLAN component, which can be exploited by attackers to elevate privileges...

KB4103727: Windows 10 Version 1709 and Windows Server Version 1709 May 2018 Security Update

The remote Windows host is missing security update 4103727. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists in .Net Framework which could allow an attacker to bypass Device Guard. An attacker who successfully exploited this vulnerability...

Microsoft Windows POP/MOV SS Local Privilege Elevation Vulnerability

This module exploits a vulnerability in a statement in the system programming guide of the Intel 64 and IA-32 architectures software developer's manual being mishandled in various operating system kerneles, resulting in unexpected behavior for DB excpetions that are deferred by MOV SS or POP SS...

PT-2018-1386

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is caused by a buffer overflow in the lim send sme probe req ind function of the Qualcomm WLAN component in the Android operating system. This can allow a remote attacker to elevate...