The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor app relates to an insecure process for searching DLL libraries. This vulnerability allows attackers to escalate their privileges.

The vulnerability of the Adobe Creative Cloud Desktop Application’s graphic editor relates to a non-safe method of searching for DLL libraries. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the microprogrammed logic controller ioLogik’s software, related to hard-coding passwords, allows a intruder to escalate their privileges and execute arbitrary code.

The vulnerability of the microprogrammed logic controller ioLogik software relates to the rigid encoding of passwords. Exploiting this vulnerability allows an attacker to enhance their privileges and execute arbitrary code remotely...

The vulnerability of the Active Directory service for Windows operating systems arises from the insecure management of privileges, allowing attackers to elevate their privileges within the system.

The vulnerability of the Active Directory service for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to escalate privileges within the system remotely...

The vulnerability of the Elastic App Search application discovery tool, related to incorrect permission configuration, allows a violator to increase their privileges.

The vulnerability of the Elastic App Search application discovery tool is related to the improper assignment of permissions for API keys. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

PT-2021-5301 · Microsoft · Active Directory Domain Services +1

Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access control in Active Directory Domain Services, which can be exploited by a remote attacker to elevate their privileges...

[SECURITY] [DLA 2791-1] mailman security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2791-1 [email protected] https://www.debian.org/lts/security/ Chris Lamb October 23, 2021 https://wiki.debian.org/LTS -...

Debian DSA-4991-1 : mailman - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dsa-4991 advisory. - /options/mailman in GNU Mailman before 2.1.31 allows Arbitrary Content Injection. CVE-2020-12108 - GNU Mailman before 2.1.33 allows arbitrary content injection...

The vulnerability of the software for accessing the VPN service vpn-user-portal arises due to insufficient validation of input data. This allows a hacker to increase their privileges.

The vulnerability of the software for accessing the VPN service vpn-user-portal exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2021-42097

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A csrftoken value is not specific to a single user account. An attacker can obtain a value within the context of an unprivileged user account, and then use that value in a CSRF attack against an admin e.g., for account takeover...

CVE-2021-42096

GNU Mailman before 2.1.35 may allow remote Privilege Escalation. A certain csrftoken value is derived from the admin password, and may be useful in conducting a brute-force attack against that password...

The vulnerability of the HBS 3 (Hybrid Backup Sync) backup and disaster recovery application for QTS operating systems, related to access control deficiencies, allows attackers to escalate their privileges.

The vulnerability of the HBS 3 Hybrid Backup Sync backup and disaster recovery application for QTS operating systems is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

GNU Mailman 安全漏洞

GNU Mailman is a free suite of software from the GNU community for managing e-mail discussions and e-mail lists. The software integrates with Web projects to make it easy for users to manage email subscription accounts and provides built-in archiving, automatic forwarding processing, content...

The vulnerability of the Active Directory catalog service for Windows operating systems arises from the insecure management of privileges, allowing attackers to elevate their own privileges.

The vulnerability of the Active Directory catalog service for Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the LLHTTP component of the NodeJS object manipulation software allows attackers to enhance their privileges.

The vulnerability of the LLHTTP component in the NodeJS object manipulation software lies in inconsistencies during the interpretation of HTTP request headers. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of Microsoft Excel editors, related to improper handling of code generation, allows attackers to escalate their privileges.

The vulnerability of Microsoft Excel editors is related to improper handling of code generation. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the LLHTTP component in the NodeJS object manipulation software, which allows attackers to enhance their privileges.

The vulnerability of the LLHTTP component in the NodeJS object manipulation software lies in inconsistencies during the interpretation of HTTP request headers. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the TSWbPrxy component in Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the TSWbPrxy component in Windows operating systems is related to deficiencies in path validation for restricted access directories. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The server for managing Fortinet FortiClient Enterprise Management Server programs is vulnerable due to errors in device management. This vulnerability allows attackers to increase their privileges.

The vulnerability of the Fortinet FortiClient Enterprise Management Server EMS server is related to errors in device management. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

mysql: InnoDB unspecified vulnerability (CPU Jan 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of...

CVE-2021-41297

CVE-2021-41297 affects ECOA BAS controller family (building automation controllers) and is due to a weak access-control mechanism that can allow an authenticated user to obtain administrative credentials in clear text, enabling remote privilege escalation. The vulnerability is documented across m...