Page 150 of 5792 results (0.045 seconds)

CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-21134

https://notcve.org/view.php?id=CVE-2023-21134

14 Aug 2023 — This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. • https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453 • CWE-862: Missing Authorization •

CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-21133

https://notcve.org/view.php?id=CVE-2023-21133

14 Aug 2023 — This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. • https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453 • CWE-862: Missing Authorization •

CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2023-21132

https://notcve.org/view.php?id=CVE-2023-21132

14 Aug 2023 — This could lead to local escalation of privilege with physical access to a device that's been factory reset with no additional execution privileges needed. • https://android.googlesource.com/platform/packages/modules/Permission/+/0679e4f35055729be7276536fe45fe8ec18a0453 • CWE-862: Missing Authorization •

CVSS: 8.4EPSS: 0%CPEs: 4EXPL: 0

CVE-2023-38721 – IBM i privilege escalation

https://notcve.org/view.php?id=CVE-2023-38721

14 Aug 2023 — The IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. • https://exchange.xforce.ibmcloud.com/vulnerabilities/262173 • CWE-269: Improper Privilege Management •

CVSS: 7.8EPSS: 0%CPEs: 9EXPL: 0

CVE-2023-3160 – Local privilege escalation in security products for Windows

https://notcve.org/view.php?id=CVE-2023-3160

14 Aug 2023 — This vulnerability allows local attackers to escalate privileges on affected installations of ESET Smart Security. ... An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. • https://support.eset.com/en/ca8466 • CWE-269: Improper Privilege Management •

CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2023-40360 – Ubuntu Security Notice USN-6567-2

https://notcve.org/view.php?id=CVE-2023-40360

14 Aug 2023 — A local attacker could use this issue to cause QEMU to crash, leading to a denial of service, or possibly execute arbitrary code and escalate privileges. This issue only affected Ubuntu 20.04 LTS. • https://gitlab.com/birkelund/qemu/-/commit/6c8f8456cb0b239812dee5211881426496da7b98 • CWE-476: NULL Pointer Dereference •

CVSS: 9.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-29378

https://notcve.org/view.php?id=CVE-2021-29378

11 Aug 2023 — SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request to Crud.php. • https://gitee.com/pear-admin/Pear-Admin-Think/issues/I3DIEC • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-23595

https://notcve.org/view.php?id=CVE-2020-23595

11 Aug 2023 — Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive information sitemodel/add.html endpoint. • https://github.com/yzmcms/yzmcms/issues/47 • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-36082

https://notcve.org/view.php?id=CVE-2020-36082

11 Aug 2023 — File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via crafted webshell file to upload module. • https://github.com/alexlang24/bloofoxCMS/issues/7 • CWE-434: Unrestricted Upload of File with Dangerous Type •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-28411

https://notcve.org/view.php?id=CVE-2021-28411

11 Aug 2023 — An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows remote attackers to escalate privileges. • https://github.com/lerry903/RuoYi/issues/20 • CWE-269: Improper Privilege Management •