8636 matches found
HPESBHF03805 rev.24 - Certain HPE products using Microprocessors from Intel, AMD, and ARM, with Speculative Execution, Elevation of Privilege and Information Disclosure (CVE-2017-5715, CVE-2017-5753, CVE-2017-5754)
Potential Security Impact: Local: Disclosure of Information, Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL120 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLiant DL160 Gen10 Server - prior to 1.3202-01-201816 Feb 2018 HPE ProLian...
PT-2018-9069
Name of the Vulnerable Software and Affected Versions: Windows 7 SP1 Windows 8.1 Windows RT 8.1 Windows Server 2008 SP2 Windows Server 2008 R2 SP1 Windows Server 2012 Windows Server 2012 R2 Description: The issue is related to the way objects are handled in memory by the Windows Adobe Type Manage...
PT-2018-9051
Name of the Vulnerable Software and Affected Versions Windows versions prior to the fixed version Description The issue is related to the way the Windows Kernel API enforces permissions, allowing an elevation of privilege. This could potentially allow attackers to affect the system. Recommendatio...
PT-2018-1117
Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is caused by a heap buffer overflow in the libMtkOmxVdec.so component. This could lead to a remote elevation of privilege, enabling code execution as a privileged process with no additional execution...
CVE-2017-16897: Authentication Bypass by Spoofing
A vulnerability has been discovered in the Auth0 passport-wsfed-saml2 library affecting versions 3.0.5. This vulnerability allows an attacker to impersonate another user and potentially elevate their privileges if the SAML identity provider does not sign the full SAML response e.g., only signs th...
ChakraCore Kernel Buffer Overflow Privilege Escalation
The vulnerability of JavaScript ChakraCore, as well as Microsoft Edge and Internet Explorer browsers, is caused by an operation that goes beyond the buffer boundaries in memory a memory object handling error. Exploiting this vulnerability can allow a remote attacker to gain administrative...
Auth0 passport-wsfed-saml2 elevation of privilege vulnerability
Auth0 passport-wsfed-saml2 library is a set of Auth0 development platform of the United States Auth0 company's tool library . A security vulnerability exists in Auth0 passport-wsfed-saml2 library versions prior to 3.0.5. An attacker can exploit the vulnerability to spoof other users and potential...
Ubiquiti UniFi Video Local Elevation of Privilege Vulnerability
Ubiquiti UniFi Video is a webcam product from Ubiquiti Networks, USA. A local elevation of privilege vulnerability exists in Ubiquiti UniFi Video. A local attacker can exploit this vulnerability to execute arbitrary code with elevated privileges...
Cambium Networks cnPilot Backdoor Access Elevation of Privilege Vulnerability
Cambium Networks cnPilot is a cloud-enabled managed single-band router product from Cambium Networks, USA. A security vulnerability exists in Cambium Networks cnPilot using firmware version 4.3.2-R4 and earlier. An attacker can exploit the vulnerability by accessing the web shell using the...
CVE-2017-14380
In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin compadmin account user could exploit a vulnerability in isigetitrace or isigetprofile maintenance scripts to run any shell script as system root on a cluster in...
CVE-2017-14380
In EMC Isilon OneFS 8.1.0.0, 8.0.1.0 - 8.0.1.1, 8.0.0.0 - 8.0.0.4, 7.2.1.0 - 7.2.1.5, 7.2.0.x, and 7.1.1.x, a malicious compliance admin compadmin account user could exploit a vulnerability in isigetitrace or isigetprofile maintenance scripts to run any shell script as system root on a cluster in...
Type confusion
Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access...
Perspective ICM Investigation Elevation of Privilege Vulnerability
Resolver Perspective ICM Investigation&Case is a suite of risk management software from Resolver Canada. A privilege extraction vulnerability exists in Resolver Perspective ICM Investigation&Case version 5.1.1.16. A remote attacker can exploit this vulnerability to change access rights and thereb...
ISPConfig Elevation of Privilege Vulnerability
ISPConfig is an open source web hosting management program for Linux with a Web control panel , you can use the Web control panel to manage web hosting , open a website , open a mailbox , open and manage mysql databases , support for DNS resolution and monitor the server's operating conditions an...
CVE-2017-13172
An elevation of privilege vulnerability in the MediaTek bluetooth driver. Product: Android. Versions: Android kernel. Android ID A-36493287. References: M-ALPS03495791...
CVE-2017-13168
An elevation of privilege vulnerability in the kernel scsi driver. Product: Android. Versions: Android kernel. Android ID A-65023233...
UBUNTU-CVE-2017-13162
An elevation of privilege vulnerability in the kernel binder. Product: Android. Versions: Android kernel. Android ID A-64216036...
CVE-2017-0837
An elevation of privilege vulnerability in the Android media framework libaudiopolicymanager. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID A-64340921...
