PT-2019-16679 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Business PCs version 2.0 Dell SupportAssist for Home PCs versions 2.2 through 3.2.1 Description: The issue concerns an Improper Privilege Management vulnerability. A malicious local user can exploit this by inheriting a...

Siemens SIMATIC Ident MV440 Family (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.1 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC Ident MV440 Familiy Vulnerabilities: Improper Privilege Management, Cleartext Transmission of Sensitive Information 2. UPDATE INFORMATION This updated advisory is a...

The vulnerability of the Storage Service component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s Storage Service component is related to privilege management errors. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Open-Xchange (OX) App Suite Multiple Vulnerabilities (Dec 2017)

Open-Xchange OX App Suite is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

The vulnerability of the Outlook Web Access email server component of the Microsoft Exchange Server allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the Outlook Web Access OWA component of the Microsoft Exchange Server email server is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information through a...

CVE-2019-11320

In Motorola CX2 1.01 and M2 1.01, users can access the router's /privmgt.html web page to launch telnetd, as demonstrated by the 192.168.51.1 address...

The vulnerability of the DefineResource method in the Ghostscript file conversion program allows a attacker to escalate their privileges.

The vulnerability of the DefineResource method in the Ghostscript file conversion program is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to increase their privileges...

The vulnerability of the Microsoft XML Core Services MSXML on the Windows operating system allows a hacker to execute malicious code and gain control over the system.

The vulnerability of the Microsoft XML Core Services MSXML in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to execute malicious code remotely and gain control over the system...

The vulnerability of the VBScript script handler in Internet Explorer allows attackers to disclose protected information.

The vulnerability of VBScript script handlers in Internet Explorer browsers is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to disclose sensitive information through a specially created web page...

The vulnerability of the NuGet package management system allows a hacker to alter the folder structure of a package.

The vulnerability of the NuGet package management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor, operating remotely, to alter the package’s folder structure...

The vulnerability of browsers Internet Explorer and Microsoft Edge, related to insecure management of privileges, allows attackers to disclose protected information.

The vulnerability of Internet Explorer and Microsoft Edge relates to the insecure management of privileges. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...

The vulnerability of the Internet Explorer browser, related to insecure management of privileges, allows attackers to partially compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Internet Explorer browser is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to partially compromise the confidentiality, integrity, and accessibility of protected information through a specially created URL address...

The vulnerability of the Windows AppX Deployment Server component of the operating system allows a hacker to gain control over the system.

The vulnerability of the Windows AppX Deployment Server component of the operating system is related to insecure management of privileges. Exploiting this vulnerability can allow a perpetrator to gain control over the system through a specially created application...

GHSA-5CF4-JQWP-584G Improper Privilege Management in org.apache.hadoop:hadoop-main

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms...

Improper Privilege Management in org.apache.hadoop:hadoop-main

In Apache Hadoop 2.9.0 to 2.9.1, 2.8.3 to 2.8.4, 2.7.5 to 2.7.6, KMS blocking users or granting access to users incorrectly, if the system uses non-default groups mapping mechanisms...

The vulnerability of the Windows operating system’s kernel, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s kernel is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of the RouterOS operating system, related to errors in privilege management, allows a hacker to circumvent network firewall policies.

The vulnerability of the RouterOS operating system is related to privilege management errors. Exploiting this vulnerability allows a malicious actor to bypass network firewall policies remotely...

The vulnerability of the SMBv2 component of the Windows operating system, allowing a hacker to execute arbitrary code

The vulnerability of the SMBv2 component of the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code by sending a specially crafted package to the SMBv2 server...

The vulnerability of the ChakraCore JavaScript script handler component in the Microsoft Edge browser allows a attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the ChakraCore JavaScript script handler component in the Microsoft Edge browser is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of protected information...

The vulnerability of the Storage Service component in the Windows operating system allows attackers to enhance their privileges and affect the confidentiality and integrity of the protected information.

The vulnerability of the Windows operating system’s Storage Service component is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges and affect the confidentiality and integrity of the protected information through a speciall...