22059 matches found
CVE-2025-27812
CVE-2025-27812 affects MSI Center prior to 2.0.52.0, with a TOCTOU Local Privilege Escalation vulnerability. The root cause is a TOCTOU issue that could permit elevation of privileges on affected systems. Remediation: upgrade MSI Center to version 2.0.52.0 or later. Exploit details are not provid...
CVE-2025-27813
CVE-2025-27813 affects MSI Center prior to 2.0.52.0. The root cause is Missing PE Signature Validation, leading to potential tampering of PE-signature verified binaries. The CVSS 3.1 score is 8.1 (HIGH) with LOCAL attack vector, high attack complexity, no privileges required, and impact to confid...
PT-2025-15978 · Msi · Msi Center
Name of the Vulnerable Software and Affected Versions: MSI Center versions prior to 2.0.52.0 Description: The issue concerns missing PE signature validation. Recommendations: For versions prior to 2.0.52.0, update to version 2.0.52.0 or later to resolve the issue...
CVE-2025-27812
MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation...
IBM Sterling Control Center 跨站脚本漏洞
IBM Sterling Control Center is an application system from International Business Machines IBM. A centralized monitoring and management system. IBM Sterling Control Center suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping o...
CVE-2025-27812
MSI Center before 2.0.52.0 allows TOCTOU Local Privilege Escalation...
PT-2025-15977 · Msi · Msi Center
Name of the Vulnerable Software and Affected Versions: MSI Center versions prior to 2.0.52.0 Description: The issue allows for Time-of-Check-to-Time-of-Use TOCTOU Local Privilege Escalation. TOCTOU refers to a class of vulnerabilities that occur when an attacker can exploit the difference between...
CVE-2025-27813
MSI Center before 2.0.52.0 has Missing PE Signature Validation...
CVE-2025-27813
MSI Center before 2.0.52.0 has Missing PE Signature Validation...
PT-2025-15985 · Ibm · Ibm Sterling Control Center
Name of the Vulnerable Software and Affected Versions: IBM Sterling Control Center versions 6.2.1 through 6.4.0 Description: The issue allows web pages to be stored locally, which can then be read by another user on the system, potentially exposing sensitive information. Recommendations: For...
DoS (Denial of Service) com.thoughtworks.xstream:xstream Dependency in Confluence Data Center and Server
This High severity com.thoughtworks.xstream:xstream Dependency vulnerability was introduced in versions 2.2 of Confluence Data Center and Server. This com.thoughtworks.xstream:xstream Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
PT-2025-18450
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A division by zero issue has been resolved in the Linux kernel. The problem occurs when the user sets a speed value greater than UINT MAX/8, making division by zero possible. This issue...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in several Azure products. A malicious person could exploit the vulnerabilities to grant themselves elevated privileges and gain access to sensitive data. The vulnerability with reference CVE-2025-27489 allows the malicious party, by loading a non-Microsoft DLL...
Vulnerability fixed in Microsoft System Center
Microsoft has fixed a vulnerability in System Center. The vulnerability allows a malicious person through an untrusted path within System Center, to elevate local permissions. For successful exploitation, the malicious party must have access to the device to reach the System Center Windows...
CVE-2025-29819
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...
CVE-2025-29819
External control of file name or path in Azure Portal Windows Admin Center allows an unauthorized attacker to disclose information locally...
CVE-2025-27743
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...
CVE-2025-27743
Untrusted search path in System Center allows an authorized attacker to elevate privileges locally...