PT-2018-9103

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Windows 7 SP1 Windows 8.1 and RT 8.1 Windows Server 2008 SP2 and R2 SP1 Windows Server 2012 and R2 Windows 10 versions prior to the fixed version, including Gold, 1511, 1607, 1703, and 1709 Windows...

PT-2018-9092

Name of the Vulnerable Software and Affected Versions: Windows 10 version 1607 Windows Server 2016 Description: The issue is related to how the MultiPoint management account password is stored, allowing an elevation of privilege. This could potentially enable attackers to affect the system...

PT-2018-9101 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to how objects in memory are handled, allowing an elevation of privilege. This could potentially affect the system. Recommendations: At the moment, there is no...

PT-2018-5532

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to an elevation of privilege vulnerability in the Upstream kernel audio driver. Recommendations: At the moment, there is no information about a newer version that contains a fix for this...

Google Android NVIDIA component libnvmmlite_audio.so file elevation of privilege vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the NVIDIA libnvmmliteaudio.so file in Android. An attacker can exploit this vulnerability to execute code write across boundarie...

PT-2018-8328

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue concerns an elevation of privilege vulnerability in NVIDIA libnvmmlite audio.so when running in a media server. This vulnerability may cause an out of bounds write, potentially...

Improper access control

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...

CVE-2018-6593: Incorrect Permission Assignment for Critical Resource

An issue was discovered in MalwareFox AntiMalware 2.74.0.150. Improper access control in zam32.sys and zam64.sys allows a non-privileged process to register itself with the driver by connecting to the filter communication port and then using IOCTL 0x8000204C to \.\ZemanaAntiMalware to elevate...

SUPERAntiSpyware Professional Trial SASKUTIL.SYS Driver Elevation of Privilege Vulnerability

SUPERAntiSpyware Professional Trial is a suite of antivirus tools mainly used for scanning for spyware from Support.com, USA.SASKUTIL.SYS driver is one of the drivers that communicates with the hardware. A security vulnerability exists in the SASKUTIL.SYS driver in SUPERAntiSpyware Professional...

PT-2018-17451

Name of the Vulnerable Software and Affected Versions Kaspersky Secure Mail Gateway version 1.1 Description The issue concerns a Local Privilege Escalation in Kaspersky Secure Mail Gateway, allowing for potential elevation of privileges. Recommendations For Kaspersky Secure Mail Gateway version...

CVE-2017-1000403

Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts...

CVE-2017-1000403

Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts...

Siemens TeleControl Server Basic Elevation of Privilege Vulnerability

Siemens TeleControl Server Basic is a remote control system for Siemens equipment from Siemens, Germany. A security vulnerability exists in Siemens TeleControl Server Basic versions prior to 3.1. An attacker could use this vulnerability to elevate privileges and perform administrative operations...

PT-2018-5185

Name of the Vulnerable Software and Affected Versions Jenkins Speaks! Plugin, all current versions Description The issue allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts. Recommendations For all...

CVE-2017-1000403: Incorrect Permission Assignment for Critical Resource

Jenkins Speaks! Plugin, all current versions, allows users with Job/Configure permission to run arbitrary Groovy code inside the Jenkins JVM, effectively elevating privileges to Overall/Run Scripts...

Code injection

Untrusted search path in Intel Graphics Driver 15.40.x.x, 15.45.x.x, and 21.20.x.x allows unprivileged user to elevate privileges via local access...

CVE-2017-5696

CVE-2017-5696 corresponds to an untrusted search path in Intel Graphics Driver (Windows) across 15.40.x.x, 15.45.x.x and 21.20.x.x that can let an unprivileged local user elevate privileges. The connected sources confirm this as a privilege-escalation issue via local access, caused by an untruste...

Cisco ESA and Content SMA Elevation of Privilege Vulnerabilities

Cisco Email Security Appliances ESAs are email security gateway products designed to detect and block a variety of email-borne threats, such as malware, spam, and phishing attacks.The Cisco Content Security Management Appliance SMA centralizes multiple Cisco email and network security appliances'...

Oracle VM VirtualBox Elevation of Privilege Vulnerability (CNVD-2018-02060)

Oracle Virtualization is the American Oracle Oracle company's set of hardware and software virtualization management solutions. Oracle VM VirtualBox is one of the virtual machine components. A security vulnerability exists in the Oracle VM VirtualBox component of Oracle Virtualization, versions...

PT-2018-2068

Name of the Vulnerable Software and Affected Versions: D-Link DIR-620 affected versions not specified Description: The issue is related to the use of predefined registration data in the firmware of the affected device. It allows a remote attacker to elevate privileges and execute arbitrary code...