34213 matches found
CVE-2025-20728
The CVE-2025-20728 entry concerns a local escalation of privilege via an out-of-bounds write in the wlan STA driver. Connected sources indicate the vulnerability affects Qualcomm wlan STA driver with an incorrect bounds check, enabling local privilege escalation with low privileges required and n...
PT-2025-44978
Name of the Vulnerable Software and Affected Versions Aruba wlan AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...
PT-2025-44967
Name of the Vulnerable Software and Affected Versions Qualcomm wlan STA driver affected versions not specified Description An out-of-bounds write issue exists in the wlan STA driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege, requiring Us...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from memory corruption due to reuse after release, which could lead to local elevation of privilege...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to local elevation of privilege...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from an insecure default value that could lead to local elevation of privilege...
mediatek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from Chinese company MediaTek. A security vulnerability exists in mediatek Chipsets, which stems from reuse after release and could lead to local elevation of privilege...
mediatek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets, which stems from reuse after release and could lead to local elevation of privilege...
Everything 安全漏洞
Everything is a file search software from Everything open source. A security vulnerability exists in Everything that stems from a named pipe having a NULL DACL, which could lead to a denial-of-service attack or elevation of privilege by a local, low-privileged user...
PT-2025-44970
Name of the Vulnerable Software and Affected Versions Cisco Wireless Lan AP Driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. Successful exploitation of this issue could allow a malicious actor...
MediaTek Chipsets 安全漏洞
MediaTek Chipsets is a series of chips from China's MediaTek Corporation MediaTek. A security vulnerability exists in MediaTek Chipsets that stems from incorrect boundary checking, which could lead to local elevation of privilege...
PT-2025-44984
Name of the Vulnerable Software and Affected Versions apusys affected versions not specified Description A memory corruption issue exists in apusys due to use after free. Successful exploitation could allow a malicious actor with System privileges to escalate their privileges locally. User...
Astra Linux – Vulnerability in Intel Microcode
The sequence of processor instructions may lead to unexpected behavior in some IntelR XeonR 6 Scalable processors. It is possible for a authenticated user to potentially enable privilege escalation through local access...
CVE-2025-34287
Nagios XI versions prior to 2024R2 contain an improperly owned script, processperfdata.pl, which is executed periodically as the nagios user but owned by www-data. Because the file was writable by www-data, an attacker with web server privileges could modify its contents, leading to arbitrary cod...
CVE-2024-58273
Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user or the backend shell user to escalate to root on the host...
Exploit for Incorrect Authorization in Polkit_Project Polkit
CVE-2021-3560Pol...
EUVD-2025-37211
Nagios XI versions prior to 2024R2 contain an improperly owned script, processperfdata.pl, which is executed periodically as the nagios user but owned by www-data. Because the file was writable by www-data, an attacker with web server privileges could modify its contents, leading to arbitrary cod...
EUVD-2024-55060
Nagios Log Server versions prior to 2024R1.0.2 contain a local privilege escalation vulnerability that allows an attacker who could execute commands as the Apache web user or the backend shell user to escalate to root on the host...
