Lucene search
K

803 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в intel-microcode

Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access...

8.8CVSS6.6AI score0.01728EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.5 views

Astra Linux - уязвимость в intel-microcode

Sequence of processor instructions leads to unexpected behavior in IntelR CoreTM Ultra Processors may allow an authenticated user to potentially enable denial of service via local access...

4.7CVSS6.3AI score0.00279EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/28 9:39 a.m.24 views

CVE-2026-7279 eMPIA Technology|AVACAST - DLL Hijacking

AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL...

8.5CVSS0.00114EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/28 9:39 a.m.3 views

EUVD-2026-26028

AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL...

8.5CVSS6.2AI score0.00114EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/28 9:39 a.m.2 views

CVE-2026-7279 eMPIA Technology|AVACAST - DLL Hijacking

AVACAST developed by eMPIA Technology, has a DLL Hijacking vulnerability, allowing authenticated local attackers to place a malicious DLL in a specific directory, resulting in arbitrary code execution with system privileges when the system loads the DLL...

8.5CVSS6.2AI score0.00114EPSS
Exploits0References2
CVE
CVE
added 2026/04/28 9:39 a.m.9 views

CVE-2026-7279

AVACAST by eMPIA Technology is affected by a DLL hijacking vulnerability that can be exploited by authenticated local attackers to place a malicious DLL in a targeted directory, leading to arbitrary code execution with system privileges when the DLL is loaded. The reports describe the vulnerabili...

8.5CVSS6.2AI score0.00114EPSS
Exploits0References2
CVE
CVE
added 2026/04/16 1:53 a.m.8 views

CVE-2026-6348

WinMatrix agent by Simopro Technology is affected by a Missing Authentication vulnerability. The CVE-2026-6348 issue allows authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine and on all hosts in the environment where the agent is installed. Credent...

9.3CVSS6.2AI score0.0018EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/16 1:53 a.m.3 views

CVE-2026-6348

WinMatrix agent developed by Simopro Technology has a Missing Authentication vulnerability, allowing authenticated local attackers to execute arbitrary code with SYSTEM privileges on the local machine as well as on all hosts within the environment where the agent is installed...

9.3CVSS6.2AI score0.0018EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/15 4:11 p.m.1 views

CVE-2026-20136

A vulnerability in the CLI of Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, local attacker with administrative privileges to perform a command injection attack on the underlying operating system and elevate privileges to root. Th...

6CVSS5.8AI score0.00533EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/15 12:28 p.m.3 views

CVE-2026-4145

During an internal security assessment, a potential vulnerability was discovered in Lenovo Software Fix that could allow a local authenticated user to perform arbitrary code execution with elevated privileges...

8.5CVSS6.3AI score0.00196EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.6 views

Lenovo Diagnostics 安全漏洞

Lenovo Diagnostics is a tool developed by Lenovo Corporation for scanning and diagnosing hardware faults on Lenovo computers. This tool helps users scan their computers, identify issues with the system, and repair them. Lenovo Diagnostics can also assist users in resolving various computer proble...

7.1CVSS6.1AI score0.002EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/10 12:30 a.m.4 views

EUVD-2026-21080

A UNIX Symbolic Link Symlink Following vulnerability in the CLI of Juniper Networks Junos OS allows a local, authenticated attacker with low privileges to escalate their privileges to root which will lead to a complete compromise of the system. When after a user has performed a specific 'file lin...

7.3CVSS5.9AI score0.00129EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2026/04/08 3:38 a.m.12 views

kernel: Linux kernel: Use-After-Free vulnerability in ATM subsystem

A flaw was found in the Linux kernel's Asynchronous Transfer Mode ATM subsystem. An authenticated local attacker could exploit a Use-After-Free UAF vulnerability in the /proc/net/atm/lec handling. This flaw occurs due to improper devput calls without prior devhold calls, leading to an imbalance i...

7.8CVSS6.7AI score0.0017EPSS
Exploits0References5
F5 Networks
F5 Networks
added 2026/04/06 7:22 p.m.4 views

K000160637: Intel 800 Series Ethernet vulnerability CVE-2025-24303

Security Advisory Description Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some IntelR 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2025-24303 Impact This...

8.8CVSS5.9AI score0.00119EPSS
Exploits0Affected Software1
NVD
NVD
added 2026/03/30 8:16 a.m.0 views

CVE-2026-4416

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation...

8.5CVSS0.00205EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/30 7:52 a.m.25 views

CVE-2026-4416 GIGABYTE|Performance Library - Insecure Deserialization

The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability. Authenticated local attackers can send a malicious serialized payload to the EasyTune Engine service, resulting in privilege escalation...

8.5CVSS0.00205EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/30 12:0 a.m.3 views

PT-2026-28807

Name of the Vulnerable Software and Affected Versions Gigabyte Control Center versions affected versions not specified Description The Performance Library component of Gigabyte Control Center contains an issue where maliciously serialized data can be sent to the EasyTune Engine service. An...

8.5CVSS5.9AI score0.00205EPSS
Exploits0References5
CNNVD
CNNVD
added 2026/03/30 12:0 a.m.3 views

GIGABYTE Control Center 代码问题漏洞

GIGABYTE Control Center is an open-source hardware management and system tuning tool developed by GIGABYTE of Taiwan, China. GIGABYTE Control Center has a code vulnerability that stems from insecure deserialization in the Performance Library component. This vulnerability could allow authenticated...

8.5CVSS5.9AI score0.00205EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/03/28 4:59 p.m.2 views

CVE-2024-11604

Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through...

7.3CVSS5.9AI score0.00109EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/27 3:30 p.m.3 views

EUVD-2024-55508

Insertion of Sensitive Information into Log File vulnerability in the SCIM Driver module in OpenText IDM Driver and Extensions on Windows, Linux, 64 bit allows authenticated local users to obtain sensitive information via access to log files. This issue affects IDM SCIM Driver: 1.0.0.0000 through...

7.3CVSS5.9AI score0.00109EPSS
Exploits0References3
Rows per page
Query Builder