Input validation

In the parseURL function of URLStreamHandler, there is improper input validation of the host field. This could lead to a remote elevation of privilege that could enable bypassing user interaction requirements with no additional execution privileges needed. User interaction is needed for...

CVE-2017-13176

CVE-2017-13176 refers to a vulnerability in Android where the parseURL function of URLStreamHandler performs improper input validation of the host field. Exploitation could enable remote elevation of privilege with user interaction required, across Android versions 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, ...

Microsoft Windows Error Reporting Remote Elevation of Privilege Vulnerability

Microsoft Windows is the popular operating system. A security vulnerability in the Microsoft Windows Error Reporting WER implementation allows an attacker to exploit the vulnerability by submitting a special request that can elevate privileges...

Microsoft Azure Active Directory Connect Remote Elevation of Privilege Vulnerability

Microsoft Azure Active Directory Connect is a service from Microsoft that provides identity and access management in the cloud. A privilege-lifting vulnerability exists in Microsoft Azure Active Directory Connect versions prior to 1.1.553.0. An attacker could exploit the vulnerability to reset...

Microsoft SharePoint Server Remote Elevation of Privilege Vulnerability (CNVD-2017-13147)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote...

Microsoft Windows Hyper-V Remote Elevation of Privilege Vulnerability

Microsoft Windows is the popular computer operating system. A remote elevation of privilege vulnerability exists on the host server where Windows Hyper-V does not properly validate vSMB packets and a remote attacker elevates privileges...

Microsoft Internet Explorer Remote Elevation of Privilege Vulnerability (CNVD-2017-05580)

Internet Explorer is a web browser from Microsoft. Internet Explorer suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain access to information in a domain and insert it into other domains...

IBM TRIRIGA Application Platform Remote Elevation of Privilege Vulnerability

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

Unspecified Remote Elevation of Privilege Vulnerability in IBM TRIRIGA Applications

The IBM TRIRIGA Application Platform is a set of technology platforms for deploying TRIRIGA applications from IBM in the United States. The platform provides a set of design-time and run-time components for building and running its enterprise applications, respectively, and supports...

Google Android Kernel Networking Subsystem Remote Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. Google Android suffers from a remote elevated privilege vulnerability. An attacker exploits the vulnerability to execute arbitrary code with elevated privileges...

VMware Workstation Remote Elevation of Privilege Vulnerability

VMware Workstation is a paid and feature-rich virtual machine software suite. VMware Workstation suffers from a remote elevation of privilege vulnerability that allows an attacker to gain elevated privileges on the host operating system...

Google Android System Server Remote Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System Server is a system server. A remote elevation of privilege vulnerability exists in System Server in Android. An attacker can exploit this vulnerability with a...

Moxa EDR-810 Router Elevation of Privilege Vulnerability

Moxa EDR-G810 is an all-in-one firewall/VPN security router product from Moxa. A remote elevation of privilege vulnerability exists in the Moxa EDR-810 router, which can be exploited by an attacker to perform unauthorized operations and obtain elevation of privilege...

Rockwell Automation MicroLogix Remote Lift Vulnerability

Rockwell Automation MicroLogix 1400 1766-L32BXBA and others are programmable logic controllers PLCs from Rockwell Automation. A remote elevation vulnerability exists in Rockwell Automation MicroLogix 1400. An attacker could use this vulnerability to gain elevated privileges and perform unauthoriz...

Red Hat JBoss EAP Remote Lift Vulnerability

Red Hat JBoss EAP Enterprise Application Platform is the United States Red Hat Red Hat, Inc. provides a set of enterprise-class security and scalability of enterprise application platform. A remote elevation vulnerability exists in Red Hat JBoss EAP version 7. A remote attacker exploits the...

Google Android Remote Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. There is a security vulnerability in the Android Shell, which can be exploited by remote attackers to build special applications, induce application parsing, and elevate privileges...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the MediaTek video driver for the Android operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

The vulnerability of the Android operating system, which allows a hacker to increase their privileges

The vulnerability of NVIDIA’s camera driver for Android operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to enhance their privileges through a specially created application...

Android Remote Elevation of Privilege Vulnerability (CNVD-2015-07366)

Android is a mobile operating system based on the Linux open kernel led and developed by Google and the Open Handset Alliance. A remote elevation of privilege vulnerability exists in Android versions prior to 5.1.1 LMY48X and 6.0 prior to 2015. Allows an attacker to gain privileges through a...

EMC Documentum Content Server Remote Lift Vulnerability (CNVD-2015-05447)

EMC Documentum Content Server is a content management service system from EMC. The system is mainly used to manage Documentum content repository, can create, modify and track documents and other operations. A remote elevation vulnerability exists in EMC Documentum Content Server. A remote attacke...