5982 matches found
EUVD-2026-71150
CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm...
CVE-2012-5519
cups-root-file-read.sh β bashλ‘ κ΅¬νλ metasploit 'cupsrootfileread.rb' λͺ¨λλ‘, μΉ¨ν¬ ν μ€νΈ λ° CTFλ₯Ό μν΄ μ€κ³λμμ΅λλ€. μ£Όλ‘ μ§§μ bash μ€ν¬λ¦½ν μ°μ΅μ λλ€. 리λ μ€ μμ€ν μμ CVE-2012-5519λ₯Ό μ΅μ€νλ‘μνλ λ 립 μ€νν νλ‘κ·Έλ¨μ λλ€. μ¬μ©μμκ² λνν ν둬ννΈλ₯Ό μ 곡νμ¬ μ¬λ¬ μ νλ νμΌμ λΉ λ₯΄κ² μ½μ μ μμ΅λλ€. μ΅μ€νλ‘μ - CVE-2012-5519 β μ΄ μ€ν¬λ¦½νΈλ CUPScommon UNIX printing system 1.6.2μ μ·¨μ½μ μ...
CVE-2026-81684
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
EUVD-2026-67040
In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...
CVE-2026-81682
openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI. The GUI writes decrypted plaintext with world-readable default permissions , allowing unprivileged local users on multi-user systems to read decrypted output files. The CVSS 3.1 score is 6...
CVE-2026-81682 openssl_encrypt before 1.4.9 Insecure File Permissions
opensslencrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems...
Astra Linux β Vulnerability in Intel Microcode
Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure through local access...
Astra Linux β Vulnerability in Linux, Linux 5.10
In the handling of offloads in ipgre.c, there is a possibility of a page fault due to an invalid memory access. This could lead to the disclosure of local information without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions...
Astra Linux β Vulnerability in Intel Microcode
Incorrect initialization of resources in the branch prediction unit of some IntelR Coreβ’ Ultra Processors may allow an authenticated user to potentially disclose information through local access...
tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition
A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...
CVE-2026-70323
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-70317
Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-70322
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-70319
Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally...
CVE-2026-70316
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-70320
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-70314
Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally...
CVE-2026-70313
Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...