8631 matches found
CVE-2017-8566
Microsoft Windows 1607, 1703, and Windows Server 2016 allows an elevation of privilege vulnerability due to Windows Input Method Editor IME improperly handling parameters in a method of a DCOM class, aka "Windows IME Elevation of Privilege Vulnerability"...
CVE-2017-8569
Microsoft SharePoint Server allows an elevation of privilege vulnerability due to the way that it sanitizes a specially crafted web request to an affected SharePoint server, aka "SharePoint Server XSS Vulnerability"...
CVE-2017-8559
Microsoft Exchange Server 2010 SP3, Exchange Server 2013 SP3, Exchange Server 2013 CU16, and Exchange Server 2016 CU5 allows an elevation of privilege vulnerability due to the way that Exchange Outlook Web Access OWA handles web requests, aka "Microsoft Exchange Cross-Site Scripting Vulnerability...
Description of the security update for Microsoft Exchange: July 11, 2017
None None...
Windows Search Remote Code Execution Vulnerability
A remote code execution vulnerability exists when Windows Search handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full...
PT-2017-18417
Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Server affected versions not specified Description The issue arises from the way Microsoft SharePoint Server sanitizes specially crafted web requests, leading to an elevation of privilege. This could allow an attacker to...
PT-2017-17283
Name of the Vulnerable Software and Affected Versions Cisco Prime Network Software versions 4.22.1PP1 through 4.31.0PP2 Description A vulnerability in the installation procedure could allow an authenticated, local attacker to elevate their privileges to root privileges. Recommendations For versio...
openSUSE Security Update : xen (openSUSE-2017-799)
This update for xen fixes several issues. These security issues were fixed : - CVE-2017-10912: Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - CVE-2017-10913 CVE-2017-10914: Races in the grant table unmap code allowed for informations leaks and potentially...
Security update for xen (important)
This update for xen fixes several issues. These security issues were fixed: - CVE-2017-10912: Page transfer might have allowed PV guest to elevate privilege XSA-217, bsc1042882 - CVE-2017-10913 CVE-2017-10914: Races in the grant table unmap code allowed for informations leaks and potentially...
PT-2017-2862
Name of the Vulnerable Software and Affected Versions Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0 Description The issue is related to insufficient access control in the libminikin library of the Android operating system. It allows a remote attacker to elevate their privilege...
Google Android kernel elevation of privilege vulnerability
Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and KernelTCB is one of the kernel thread control blocks. A privilege-lifting vulnerability exists in KernelTCB in Android. An attacker can exploit the vulnerability to bypass...
PT-2017-16255
Name of the Vulnerable Software and Affected Versions EMC RSA Archer versions 5.4.1.3, 5.5.1.1, 5.5.1.3.1, 5.5.2, 5.5.2.3, 5.5.3.1 Description The issue is related to an authorization bypass through a user-controlled key vulnerability in Discussion Forum Messages. A remote low-privileged attacker...
CVE-2017-0664
A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36491278...
CVE-2017-0667
CVE-2017-0667 is an Android framework elevation of privilege vulnerability affecting Android 5.0.2, 5.1.1, 6.0/6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID A-37478824). The issue is categorized as Framework EoP; details in connected sources confirm affected component and version range but do not prov...
CVE-2017-0664
A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36491278...
CVE-2017-0665
A elevation of privilege vulnerability in the Android framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-36991414...
CVE-2017-0705
A elevation of privilege vulnerability in the Broadcom wi-fi driver. Product: Android. Versions: Android kernel. Android ID: A-34973477. References: B-RB119898...
CVE-2017-0704
A elevation of privilege vulnerability in the Android system ui. Product: Android. Versions: 7.1.1, 7.1.2. Android ID: A-33059280...