27503 matches found
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000314)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000314 advisory. The rbd block device driver in drivers/block/rbd.c in the Linux kernel through 5.8.9 used incomplete permission checking for access to rbd devices, which could be...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000399)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000399 advisory. Use-after-free vulnerability in the Linux kernel exploitable by a local attacker due to reuse of a DCCP socket with an attached dccpshctxccid object as a listener...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000494)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000494 advisory. A flaw was found in the Linux kernel's implementation of Userspace core dumps. This flaw allows an attacker with a local account to crash a trivial program and...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000458)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000458 advisory. A flaw was found in the Linux kernel's Bluetooth implementation of UART, all versions kernel 3.x.x before 4.18.0 and kernel 5.x.x. An attacker with local access and...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000421)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000421 advisory. A flaw was found in the Linux kernels futex implementation. This flaw allows a local attacker to corrupt system memory or escalate their privileges when creating a...
CVE-2025-12793
An uncontrolled DLL loading path vulnerability exists in AsusSoftwareManagerAgent. A local attacker may influence the application to load a DLL from an attacker-controlled location, potentially resulting in arbitrary code execution. Refer to the ' Security Update for MyASUS' section on the ASUS...
CVE-2025-12793
CVE-2025-12793 affects AsusSoftwareManagerAgent with an uncontrolled DLL loading path vulnerability. The Red Hat and CVE records corroborate a local attacker could influence the process to load a DLL from an attacker-controlled location, potentially enabling arbitrary code execution. The PT-Secur...
PT-2026-1384
Name of the Vulnerable Software and Affected Versions c2ps affected versions not specified Description A memory corruption issue exists in c2ps due to a use-after-free condition. Successful exploitation of this issue could allow a malicious actor to gain local system privileges, provided they...
PT-2026-1396
Name of the Vulnerable Software and Affected Versions AsusSoftwareManagerAgent affected versions not specified Description An uncontrolled DLL loading path issue exists in AsusSoftwareManagerAgent. A local attacker may be able to influence the application to load a DLL from a location controlled ...
PT-2026-1385
Name of the Vulnerable Software and Affected Versions mminfra affected versions not specified Description An out-of-bounds write issue exists due to a missing bounds check. Successful exploitation could allow a local attacker with System privileges to escalate their privileges. User interaction i...
libtiff: LibTIFF Use-After-Free Vulnerability
A flaw was found in libtiff. The gethistogram function in file/tiffmedian.c exhibits a use-after-free condition when processing a specially crafted file, allowing a local attacker to trigger memory corruption. This manipulation results in a use-after-free vulnerability, and can lead to a denial o...
Medium: edk2
Issue Overview: EDK2 contains a vulnerability in BIOS where an attacker may cause "Exposure of Sensitive Information to an Unauthorized Actor" by local access. Successful exploitation of this vulnerability will lead to possible information disclosure or escalation of privilege and impact...
PT-2026-1094
Name of the Vulnerable Software and Affected Versions Qfinder Pro Mac versions prior to 7.13.0 Qsync for Mac versions prior to 5.1.5 QVPN Device Client for Mac versions prior to 2.2.8 Description A path traversal issue exists that could allow a local attacker with a user account to read the...
CVE-2025-15418
CVE-2025-15418 affects Open5GS up to 2.7.6. The vulnerability is in the function ogs_gtp2_parse_bearer_qos (lib/gtp/v2/types.c) within the Bearer QoS IE Length Handler, where manipulation can cause a denial of service . The attack is local (requires local access). Public exploit availability is i...
PT-2026-2252
Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 20.36.1 Description virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, Time-of-Check-Time-of-Use TOCTOU vulnerabilities exist in virtualenv that allow local attackers ...
CVE-2025-66835
TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context...
theshit vulnerable to unsafe loading of user-owned Python rules when running as root
The application loads custom Python rules and configuration files from user-writable locations e.g., /.config/theshit/ without validating ownership or permissions when executed with elevated privileges. If the tool is invoked with sudo or otherwise runs with an effective UID of root, it continues...
CVE-2024-29720
An issue in Terra Informatica Software, Inc Sciter v.4.4.7.0 allows a local attacker to obtain sensitive information via the adopt component of the Sciter video rendering function...
