Vulnerability in the web interface for managing Cisco Small Business Smart and Managed Switches’ micro-programming software, allowing attackers to increase their privileges

The vulnerability in the web interface for managing Cisco Small Business Smart and Managed Switch microprogramming software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Microsoft Internet Information Server (IIS) server allows for unauthorized access by attackers, enabling them to escalate their privileges. This vulnerability is related to the Windows Background Intelligent Transfer Service (BITS), which operates on Windows operating systems.

The vulnerability of the Microsoft Internet Information Server IIS server, due to the Windows Background Intelligent Transfer Service BITS, affects operating systems running on Windows. This vulnerability is related to file operation processing errors. Exploiting this vulnerability can allow an...

Vim component of the Mac OS system is vulnerable, allowing attackers to exploit their privileges.

The vulnerability of the Vim component in the Mac OS operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of the Eclipse OpenJ9 virtual machine, related to errors in access control for diagnostic operations, allows attackers to escalate their privileges.

The vulnerability of the Eclipse OpenJ9 virtual machine is related to errors in access control for diagnostic operations. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2020-0201

In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Design/Logic Flaw

In showSecurityFields of WifiConfigController.java there is a possible credential leak due to a confused deputy. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Intel AMT and ISM Resource Management Error Vulnerability

Intel Active Management Technology AMT and Intel Software Manager ISM are both products of Intel Corporation.Intel Active Management Technology is a set of hardware-based computer remote active Intel Software Manager is a utility program for managing Intel software development products. A resourc...

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server, related to deficiencies in access control, allows attackers to increase their privileges.

The vulnerability of Microsoft SharePoint Server, SharePoint Foundation, and SharePoint Enterprise Server is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Apache CouchDB 3.0.0 Remote Privilege Escalation Vulnerability - Windows

CouchDB is prone to a remote privilege escalation vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apache:couchdb";...

PT-2020-5588 · Fortinet · Fortivoiceentreprise +1

Name of the Vulnerable Software and Affected Versions: FortiMail versions 5.4.10 and earlier, 6.0.7 and earlier, 6.2.2 and earlier FortiVoiceEntreprise versions 6.0.0 and 6.0.1 Description: The issue is related to weaknesses in the authentication procedure of the email protection system. It may...

The vulnerability of the auth_svc function in the Caldera automated system for emulating hacker actions allows a hacker to increase their privileges.

The vulnerability of the authsvc function in the Caldera Calibur emulation system is related to errors in processing the “localhost” string in the HTTP header of the host. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

The vulnerability of the VMware Directory Service (vmdir), a management service for virtual infrastructure, allows a attacker to escalate their privileges.

The vulnerability of the VMware Directory Service vmdir, a component of the VMware vCenter Server virtualization infrastructure management tool, is related to lack of access control mechanisms. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...

PT-2020-2027

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions prior to the fixed version Description The issue is related to insufficient access control in the VMware Directory Service vmdir of VMware vCenter Server. This can allow a remote attacker to elevate their...

The vulnerability of the RSLogix 500 software, the programmable logic controllers MicroLogix 1100 and MicroLogix 1400, arises from the use of a rigidly encrypted cryptographic key, which allows an intruder to gain enhanced privileges.

The vulnerability of the RSLogix 500 software, the programmable logic controllers MicroLogix 1100, and MicroLogix lies in the use of a rigidly encrypted cryptographic key. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges...

The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows attackers to escalate their privileges.

The vulnerability of Microsoft Exchange Server is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the STARTTLS component of the Keycloak identity and access management software lies in implementation errors related to authentication procedures. This allows attackers to escalate their privileges.

The vulnerability of the STARTTLS component of the Keycloak identity and access management software is related to implementation errors in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the K7TSHlpr.dll module in antivirus protection tools such as K7 Antivirus Premium, K7 Total Security, and K7 Ultimate Security allows attackers to escalate their privileges.

The vulnerability of the K7TSHlpr.dll module in antivirus protection tools such as K7 Antivirus Premium, K7 Total Security, and K7 Ultimate Security is related to errors in inter-process communication. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the SAP NetWeaver software integration platform, caused by deficiencies in the authentication process, allows attackers to increase their privileges.

The vulnerability of the SAP NetWeaver software integration platform is due to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

The vulnerability of D-Link DIR-601 router’s microprogramming software, related to authentication deficiencies, allows attackers to escalate their privileges.

The vulnerability of D-Link DIR-601 router’s microprogramming software is related to authentication deficiencies. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of SAP Leasing software, related to authentication errors, allows a perpetrator to increase their privileges.

The vulnerability of SAP Leasing software is related to authentication errors. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...