PT-2025-6637

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue concerns improper initialization in the UEFI firmware OutOfBandXML module, which may allow a privileged user to potentially enable information disclosure via local access...

PT-2025-6488

Name of the Vulnerable Software and Affected Versions IntelR processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR processors. This may allow a privileged user to potentially enable escalation of privilege via loc...

PT-2025-6103 · Unknown · Code-Projects Police Fir Record Management System

Name of the Vulnerable Software and Affected Versions: code-projects Police FIR Record Management System version 1.0 Description: A problematic vulnerability has been found in the Add Record Handler component of the system. This issue leads to a stack-based buffer overflow. Local access is requir...

Azure Linux 3.0 Security Update: unbound (CVE-2024-43168)

The version of unbound installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-43168 advisory. - DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software...

OESA-2025-1098 binutils security update

Binutils is a collection of binary utilities, including ar for creating, modifying and extracting from archives, as a family of GNU assemblers, gprof for displaying call graph profile data, ld the GNU linker, nm for listing symbols from object files, objcopy for copying and translating object...

PT-2025-6895

Name of the Vulnerable Software and Affected Versions: GNU elfutils version 0.192 Description: A critical issue was found in GNU elfutils. This affects the process symtab function of the readelf.c file in the eu-readelf component. The manipulation of the D/a argument leads to a buffer overflow...

CVE-2022-25992

Insecure inherited permissions in the IntelR oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34152

Improper input validation in BIOS firmware for some IntelR NUC Boards, IntelR NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-34153

Improper initialization in the IntelR Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21198

Time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21794

Improper authentication in BIOS firmware for some IntelR NUC Boards, IntelR NUC Business, IntelR NUC Enthusiast, IntelR NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-29510

Improper buffer restrictions in some IntelR Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-29262

Improper buffer restrictions in some IntelR Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2025-5870 · Ibm · Ibm Entirex

Name of the Vulnerable Software and Affected Versions: IBM EntireX version 11.1 Description: The issue allows a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Recommendations: Fo...

CVE-2022-29919

Use after free in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-41958

super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...

CVE-2022-32766

Improper input validation for some IntelR BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36372

Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36374

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36949

In Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server could potentially escalate their privileges. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10...