2172 matches found
CVE-2019-1010008
OpenEnergyMonitor Project Emoncms 9.8.8 is affected by: Cross Site Scripting XSS. The impact is: Theoretically low, but might potentially enable persistent XSS user could embed mal. code. The component is: Javascript code execution in "Name", "Location", "Bio" and "Starting Page" fields in the "M...
The vulnerability of the Windows Operating System’s User Profile Service allows attackers to escalate their privileges.
The vulnerability of the User Profile Service ProfSvc in Windows operating systems is related to deficiencies in handling symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...
June 27, 2019—KB4501375 (OS Build 18362.207)
None None...
CVE-2019-0986
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...
CVE-2019-0986
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks, aka 'Windows User Profile Service Elevation of Privilege Vulnerability'...
CVE-2019-0986
CVE-2019-0986 affects the Windows User Profile Service (ProfSvc) and concerns improper handling of symlinks. The vulnerability enables elevation of privilege, allowing an attacker who can log on to run a crafted application that could delete files or folders in an elevated context. The impact is ...
CVE-2019-0986 Windows User Profile Service Elevation of Privilege Vulnerability
...
Windows User Profile Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows User Profile Service ProfSvc improperly handles symlinks. An attacker who successfully exploited this vulnerability could delete files and folders in an elevated context. To exploit this vulnerability, an attacker would first have to...
Microsoft Windows User Profile Service Elevation of Privilege (CVE-2019-0986)
An elevation of privilege vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
KLA11493 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, spoof user interface, execute arbitrary code, obtain sensitive information, bypass security restrictions, cause denial of service. Below is a complete list of...
Microsoft Windows User Profile Service CVE-2019-0986 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...
Windows 10 v2004, 20H2, 21H1, 21H2 & 22H2 – Citrix Known Issues
Microsoft releases software updates for Windows 10 twice a year through the Semi-Annual Channel. Microsoft released its Semi-Annual Channel 'May 2020 update' v2004 in May 2020,'October 2020 update'20H2 in October 2020, 'May 2021 update' 21H1 in May 2021, 'November 2021 update' 21H2 and '2022...
Ultimate Member Plugin for WordPress < 2.0.46 Multiple Vulnerabilities
The WordPress Ultimate Member Plugin installed on the remote host is affected by multiple vulnerabilities : - An arbitrary file read and delete vulnerability. - A Cross-Site Scripting XSS vulnerability exists due to improper validation of user-supplied input in admin dashboard. - A Cross-Site...
Description of the security update for SharePoint Enterprise Server 2016: May 14, 2019
None None...
Ultimate Member < 2.0.46 - Multiple Vulnerabilities
The Ultimate Member – User Profile, User Registration, Login & Membership Plugin WordPress plugin was affected by a Multiple Vulnerabilities security vulnerability...
Input validation
Improper handling of extra parameters in the AccountController User Profile edit in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions...
CVE-2019-11218
Improper handling of extra parameters in the AccountController User Profile edit in Jakub Chodounsky Bonobo Git Server before 6.5.0 allows authenticated users to gain application administrator privileges via additional form parameter submissions...
CVE-2019-11218
CVE-2019-11218 affects Bonobo Git Server prior to 6.5.0, where improper handling of extra parameters in AccountController (User Profile edit) allows authenticated users to escalate privileges to application administrator. The issue is triggered by additional form parameters and is documented acro...
RARLAB WinRAR ACE Format Input Validation Remote Code Execution Exploit
In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format in UNACEV2.dll. When the filename field is manipulated with specific patterns, the destination extraction folder is ignored, thus treating the filename as an...