1777 matches found
The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
ZenML ZenML Server - Improper Authentication
ZenML Server in the ZenML machine learning package before 0.46.7 for Python allows remote privilege escalation because the /api/v1/users/usernameorid/activate REST API endpoint allows access on the basis of a valid username along with a new password in the request body. id: CVE-2024-25723 info:...
ROS-20260724-73-0022
The vulnerability in dotnet10.0 relates to bypassing authentication using data that is assumed to be unchangeable. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
CVE-2025-50330
An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote attacker to escalate privileges and execute arbitrary code via the zipgenius.exe...
CVE-2025-50329
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
CVE-2026-40714
Dell PowerProtect Data Manager, before version 20.2.0.0, is affected by an Improper Input Validation vulnerability that could allow a high-privilege attacker with remote access to achieve Elevation of Privilege. The CVE entry lists a CVSSv3.1 base score of 7.2 (HIGH) with network access, high imp...
EUVD-2025-210499
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
CVE-2025-50329
CVE-2025-50329 affects ConeXware, Inc. Power Archiver
CVE-2025-50329
An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privileges and execute arbitrary code via the powerarc.exe...
CVE-2026-52470
SQL injection vulnerability in Crocus v.1.3.44 allows a remote attacker to escalate privileges via the RecordStateMapper.xml file...
CVE-2026-52472
SQL injection vulnerability in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the PortInfoMapper.xml file...
CVE-2026-52472
CVE-2026-52472 is an SQL injection vulnerability affecting Wgcloud 3.6.4, exploitable via the PortInfoMapper.xml file. The NVD entry describes that a remote attacker can escalate privileges by sending crafted input to this component. The CVSS v3.1 vector indicates a network-accessible, low-comple...
CVE-2026-50759
An issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET /state and DELETE /instance/instanceid endpoints with no authentication...
HPLIP: Incomplete Fix for CVE-2026-8631
A flaw was found in HPLIP HP Linux Imaging and Printing Software. This vulnerability, an incomplete fix for CVE-2026-8631, may allow a remote attacker to escalate privileges or achieve arbitrary code execution. This can occur through an integer overflow in the hpcups processing path when handling...
The vulnerability of Active Directory Certificate Services on Windows operating systems allows attackers to increase their privileges.
The vulnerability of Active Directory Certificate Services on Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
ROS-20260715-73-0007
The vulnerability of the Apache HTTP Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the lack of authentication for a critical function, allowing attackers to escalate their privileges.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
The vulnerability of the PowerDNS Recursor DNS server, related to errors in the use of standard permissions, allows a hacker to trigger a service failure.
The vulnerability of the PowerDNS Recursor DNS server is related to errors in the use of standard permissions. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
The vulnerability of the nfs-utils package, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of the nfs-utils package is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...