PT-2018-9162

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server 2010 version 14.3.452.0 Service Pack 3 Update Rollup 20 Microsoft Exchange Server 2013 versions 15.0.1497.2 through 15.0.1514.2 Microsoft Exchange Server 2016 versions 15.1.1034.26 through 15.1.1066.14 Description: T...

PT-2018-9144

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An issue exists where Microsoft SharePoint Server fails to properly sanitize a specially crafted web request, allowing for potential elevation of privilege. This could...

PT-2018-9120

Name of the Vulnerable Software and Affected Versions: Windows 10 versions 1607 through 1709 Windows Server 2016 Windows Server, version 1709 Description: The issue is related to how the virtual registry is managed in the Desktop Bridge, allowing an elevation of privilege. This could potentially...

PT-2018-9145

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: An issue exists where Microsoft SharePoint Server fails to properly sanitize a specially crafted web request, allowing for potential elevation of privilege. This could...

PT-2018-1161

Name of the Vulnerable Software and Affected Versions Windows 10 versions 1607 through 1709 Windows Server 2016 Windows Server, version 1709 Description The issue is related to the management of file paths in the Desktop Bridge Virtual File System VFS, which can lead to an elevation of privilege...

PT-2018-9166

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Server affected versions not specified Description: The issue arises from Microsoft SharePoint Server's failure to properly verify tenant permissions, leading to an elevation of privilege. This could allow an attacker to...

PT-2018-9164

Name of the Vulnerable Software and Affected Versions: Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 Description: An elevation of...

Security Updates for Exchange (March 2018)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the way that Microsoft Exchange Server handles URL redirects. If an impacted user is using Microsoft...

CVE-2018-6183

BitDefender Total Security 2018 allows local users to gain privileges or cause a denial of service by impersonating all the pipes through a use of an "insecurely created named pipe". Ensures full access to Everyone users group...

Debian DLA-1304-1 : zsh security update

It was discovered that there were multiple vulnerabilities in the 'zsh' shell : - CVE-2014-10070: Fix a privilege-elevation issue if the environment has not been properly sanitized. - CVE-2014-10071: Prevent a buffer overflow for very long file - descriptors in the '& fd' syntax. - CVE-2014-10072...

[SECURITY] [DLA 1304-1] zsh security update

Package : zsh Version : 4.3.17-1+deb7u1 CVE IDs : CVE-2014-10070 CVE-2014-10071 CVE-2014-10072 CVE-2016-10714 CVE-2017-18206 It was discovered that there were multiple vulnerabilities in the "zsh" shell: CVE-2014-10070: Fix a privilege-elevation issue if the environment has not been properly...

CVE-2018-0213

A vulnerability in the credential reset functionality for Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to gain elevated privileges. The vulnerability is due to a lack of proper input validation. An attacker could exploit this vulnerability by authenticating to...

Gemalto SafeNet Authentication Service TokenValidator Proxy Agent Elevation of Privilege Vulnerability

Gemalto SafeNet Authentication Service TokenValidator Proxy Agent is a proxy program from Gemalto USA. The program implements proxy authentication requests from other proxies to the SAS. A security vulnerability exists in the Gemalto SafeNet Authentication Service TokenValidator Proxy Agent that...

OIC Exponent CMS Elevation of Privilege Vulnerability

OIC Exponent CMS is a free, open source modular content management system CMS based on PHP from the American OIC Group of companies. The system supports direct editing in the page, and provides user management, site configuration, content editing and other functions. A security vulnerability exis...

CVE-2017-18213

In Exponent CMS before 2.4.1 Patch 6, certain admin users can elevate their privileges...

CVE-2017-18213

In Exponent CMS before 2.4.1 Patch 6, certain admin users can elevate their privileges...

PT-2018-6741

Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.4.1 Patch 6 Description: The issue allows certain admin users to elevate their privileges. Recommendations: For versions prior to 2.4.1 Patch 6, update to version 2.4.1 Patch 6 or later to resolve the issue...

PT-2018-4435

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service Windows Logon Agent affected versions not specified Description The issue is related to a weak Access Control List ACL used by the SafeNet Authentication Service Windows Logon Agent for certain installation...

PT-2018-4431

Name of the Vulnerable Software and Affected Versions SafeNet Authentication Service Remote Web Workplace Agent affected versions not specified Description The issue concerns a weak Access Control List ACL used by the SafeNet Authentication Service Remote Web Workplace Agent for certain...

ABB MicroSCADA Installation Elevation of Privilege Vulnerability

ABB MicroSCADA is a suite of substation monitoring and control software from ABB Switzerland, developed specifically for power transmission and distribution systems. The software includes a human-machine interface MMI and flexible application engineering tools, and provides monitoring, event...