CVE-2023-42689
https://notcve.org/view.php?id=CVE-2023-42689
04 Dec 2023 — This could lead to local escalation of privilege with no additional execution privileges needed En wifi service, existe una posible falta de verificación de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049 • CWE-862: Missing Authorization •
CVE-2023-42688
https://notcve.org/view.php?id=CVE-2023-42688
04 Dec 2023 — This could lead to local escalation of privilege with no additional execution privileges needed En wifi service, existe una posible falta de verificación de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049 • CWE-862: Missing Authorization •
CVE-2023-42687
https://notcve.org/view.php?id=CVE-2023-42687
04 Dec 2023 — This could lead to local escalation of privilege with no additional execution privileges needed En wifi service, existe una posible falta de verificación de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049 • CWE-862: Missing Authorization •
CVE-2023-42686
https://notcve.org/view.php?id=CVE-2023-42686
04 Dec 2023 — This could lead to local escalation of privilege with no additional execution privileges needed En wifi service, existe una posible falta de verificación de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049 • CWE-862: Missing Authorization •
CVE-2023-42685
https://notcve.org/view.php?id=CVE-2023-42685
04 Dec 2023 — This could lead to local escalation of privilege with no additional execution privileges needed En wifi service, existe una posible falta de verificación de permisos. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049 • CWE-862: Missing Authorization •
CVE-2023-42681
https://notcve.org/view.php?id=CVE-2023-42681
04 Dec 2023 — This could lead to local escalation of privilege with no additional execution privileges needed En el servicio ion, es posible que falte una verificación de permiso. Esto podría conducir a una escalada local de privilegios sin necesidad de permisos de ejecución adicionales. • https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049 • CWE-862: Missing Authorization •
CVE-2023-45252
https://notcve.org/view.php?id=CVE-2023-45252
01 Dec 2023 — DLL Hijacking vulnerability in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, due to the installation of the service in a directory that grants write privileges to standard users, allows attackers to manipulate files, execute arbitrary code, and escalate privileges. • https://www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253 • CWE-427: Uncontrolled Search Path Element •
CVE-2023-45253
https://notcve.org/view.php?id=CVE-2023-45253
01 Dec 2023 — An issue was discovered in Huddly HuddlyCameraService before version 8.0.7, not including version 7.99, allows attackers to manipulate files and escalate privileges via RollingFileAppender.DeleteFile method performed by the log4net library. • https://www.xlent.no/aktuelt/security-disclosure-of-vulnerabilities-cve-2023-45252-and-cve-2023-45253 • CWE-269: Improper Privilege Management •
CVE-2023-41807 – Linux Local Privilege Escalation Via GoTTY Page
https://notcve.org/view.php?id=CVE-2023-41807
23 Nov 2023 — Improper Privilege Management vulnerability in Pandora FMS on all allows Privilege Escalation. • https://pandorafms.com/en/security/common-vulnerabilities-and-exposures • CWE-269: Improper Privilege Management •
CVE-2021-37942 – APM Java Agent Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2021-37942
22 Nov 2023 — A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious plugin to an application running the APM Java agent. ... Se encontró un problema de escalada de privilegios local con APM Java Agent, donde un usuario del sistema podía adjuntar un complemento malicioso a una aplicación que ejecutaba APM Java Agent. • https://discuss.elastic.co/t/apm-java-agent-security-update/291355 • CWE-269: Improper Privilege Management •