Cisco SD-WAN Software Privilege Escalation (cisco-sa-vepestd-8C3J9Vc)

According to its self-reported version, Cisco SD-WAN is affected by a privilege escalation vulnerability exists due to insufficient input validation. An authenticated, local attacker can exploit this by sending crafted options to a specific command, to gain root access to the system. TRUSTED...

Arbitrary Code Execution

thunderbird is vulnerable to arbitrary code execution. The vulnerability exists through as a HTML mail message containing malicious content could possibly lead to arbitrary code execution with the privileges of the user running Thunderbird...

Multiple Pivotal RabbitMQ Products CVE-2019-11291 Cross Site Scripting Vulnerability

Description Multiple Pivotal RabbitMQ products are prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected...

CVE-2017-18376

An improper authorization check in the User API in TheHive before 2.13.4 and 3.x before 3.3.1 allows users with read-only or read/write access to escalate their privileges to the administrator's privileges. This affects app/controllers/UserCtrl.scala...

Microsoft Internet Explorer CVE-2016-3290 Remote Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Attackers can exploit this issue to execute arbitrary code in the context of the currently logged-i...

WeTransfer - Customized SSL, KeyStore usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application WeTransfer published at the 'play' market has multiple vulnerabilities...

radvd multiple security vulnerabilities

Privilege escalation, buffer overflow, DoS...

CVE-2010-2023

transports/appendfile.c in Exim before 4.72, when a world-writable sticky-bit mail directory is used, does not verify the stnlink field of mailbox files, which allows local users to cause a denial of service or possibly gain privileges by creating a hard link to another user's file...

Sun StorEdge Enterprise Backup / Solstice Backup privilege escalation

No description provided...

Linksys WLAN Monitor privilege escalation

It's possible to execute application with LocalSystem privileges from Help system...

CVE-2024-33228

An issue in the component segwindrvx64.sys of Insyde Software Corp SEG Windows Driver v100.00.07.02 allows attackers to escalate privileges and execute arbitrary code via sending crafted IOCTL requests...