Windows AD FS Security Feature Bypass Vulnerability

In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.

Azure Data Box Gateway Remote Code Execution Vulnerability

Windows Kerberos Elevation of Privilege Vulnerability

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Microsoft OneDrive for iOS Security Feature Bypass Vulnerability

Weak authentication in Microsoft Dynamics 365 allows an unauthenticated attacker to elevate privileges over a network.

Weak authentication in EOL ASP.NET Core allows an unauthorized attacker to elevate privileges over a network. NOTE: This CVE affects only End Of Life (EOL) software components. The vendor, Microsoft, has indicated there will be no future updates nor support provided upon inquiry.

Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally.

Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network.

Weak authentication in Windows Active Directory Certificate Services allows an authorized attacker to elevate privileges over a network.

Weak authentication in ASP.NET Core & Visual Studio allows an unauthorized attacker to elevate privileges over a network.

Active Directory Certificate Services Elevation of Privilege Vulnerability