CVE-2025-68623

In Microsoft DirectX End-User Runtime Web Installer 9.29.1974.0, a low-privilege user can replace an executable file during the installation process, which may result in unintended elevation of privileges. During installation, the installer runs with HIGH integrity and downloads executables and...

Podman Vulnerable to Arbitrary File Write via Symbolic Link Traversal in 'play.go' File

Podman contains a symbolic link traversal vulnerability when the kube play command is used with a 'ConfigMap' or secret volume mount. A remote attacker could exploit this by creating a malicious symbolic link on the volume in order to overwrite the contents of arbitrary files, however the attacke...

CVE-2025-15314

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15314

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

Tanium end-user-cx 安全漏洞

Tanium end-user-cx is a terminal tool extension provided by the American company Tanium. There is a security vulnerability in Tanium end-user-cx, which stems from the ability to delete arbitrary files...

CVE-2025-15318

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

CVE-2025-15314

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15314

Technical details about CVE-2025-15314 (affected products, affected components, root cause, impact, and remediation specifics) are not publicly available in the provided documents. Monitor for updates from the vendor and standard vulnerability feeds.

CVE-2025-15314 Tanium addressed an arbitrary file deletion vulnerability in end-user-cx.

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

CVE-2025-15318

CVE-2025-15318 concerns an arbitrary file deletion vulnerability in Tanium End-User Notifications Endpoint Tools. The public records indicate Tanium addressed the issue, with referenced advisories (e.g., TAN-2025-017) and CVSS metrics showing LOCAL attacker, high impact on integrity and availabil...

CVE-2025-15318 Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools.

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

CVE-2025-15318

Tanium addressed an arbitrary file deletion vulnerability in End-User Notifications Endpoint Tools...

Tanium end-user-cx 安全漏洞

Tanium end-user-cx is a terminal tool extension provided by the American company Tanium. There is a security vulnerability in Tanium end-user-cx, which stems from the ability to delete arbitrary files...

PT-2026-7190

Tanium addressed an arbitrary file deletion vulnerability in end-user-cx...

CVE-2025-13845

CVE-2025-13845 affects Schneider Electric EcoStruxure Power Build Rapsody. The Red Hat/NVD entries and Schneider Electric communications describe a CWE-416 Use After Free vulnerability (also noted as a Double Free in some sources) that could allow remote code execution when an end user imports a ...

CVE-2026-22646

Certain error messages returned by the application expose internal system details that should not be visible to end users, providing attackers with valuable reconnaissance information like file paths, database errors, or software versions that can be used to map the application's internal structu...

EUVD-2025-205605

Meshtastic is an open source mesh networking solution. The Meshtastic firmware starting from version 2.5 introduces asymmetric encryption PKI for direct messages, but when the pkiencrypted flag is missing, the firmware silently falls back to legacy AES-256-CTR channel encryption. This was an...

Qodo Gen 安全漏洞

Qodo Gen is a code AI aid from Qodo, Inc. in the United States. A security vulnerability exists in Qodo Gen that stems from vulnerability to a path traversal attack that could result in reading arbitrary local files on an end-user's system...