CVE-2024-56495

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56494

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56810

IBM EntireX 11.1 contains a local information-disclosure vulnerability where returning detailed technical error messages can reveal sensitive data to a local user. Affected product/version: IBM EntireX 11.1. Root cause: detailed error messages exposing sensitive information. Impact: potential inf...

CVE-2024-56810 IBM EntireX information disclosure

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-56811

CVE-2024-56811 affects IBM EntireX 11.1. An information-disclosure vulnerability allows a local user to obtain sensitive data by triggering a detailed technical error message returned by the system. The issue is tied to the error message contents, enabling information leakage that could assist fu...

CVE-2024-56812 IBM EntireX information disclosure

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

PT-2025-8954 · Ibm · Ibm Entirex

Name of the Vulnerable Software and Affected Versions: IBM EntireX version 11.1 Description: A local user could obtain sensitive information when a detailed technical error message is returned, which could be used in further attacks against the system. Recommendations: For IBM EntireX version 11....

Cisco Nexus 3000 Series Switches和Cisco Nexus 9000 Series Switches 操作系统命令注入漏洞

Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches are both products of Cisco, Inc.Cisco Nexus 3000 Series Switches is a 3000 series switch.Cisco Nexus Cisco Nexus 9000 Series Switches are Cisco products.Cisco Nexus 3000 Series Switches are 3000 series switches. An operating...

Siemens SIMATIC S7-1500 TM MFP BIOS Incorrect Default Permissions (CVE-2021-20269)

A flaw was found in the permissions of a log file created by kexec- tools. This flaw allows a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality. This flaw affects kexec-tools shipp...

wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users

A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability...

CVE-2024-45673

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user...

CVE-2024-45674

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user...

CVE-2024-45673

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user...

CVE-2024-45673

IBM Security Verify Bridge vulnerabilities CVE-2024-45673 (and related CVE-2024-45674) affect IBM Security Verify Bridge Directory Sync (versions 1.0.1–1.0.12), IBM Security Verify Gateway for Windows Login (1.0.1–1.0.10), and IBM Security Verify Gateway for Radius (1.0.1–1.0.11). The root cause ...

CVE-2025-1215

A flaw was found in Vim. A local user may be able to trigger memory corruption by using the --log option with a non-existent path, which can lead to an application crash or other undefined behavior...

Intel QAT 安全漏洞

Intel QAT software refers to the collection of software components that support Intel QuickAssist technology. An untrusted pointer dereference vulnerability exists in Intel QAT software, which can be exploited by an attacker to access compromised information via the local system...

Azure Linux 3.0 Security Update: qemu / qemu-kvm (CVE-2022-0358)

The version of qemu / qemu-kvm installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-0358 advisory. - A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw...

CVE-2024-56467

IBM EntireX 11.1 could allow a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system...

CVE-2024-49804

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user to escalate their privileges due to unnecessary permissions used to perform certain tasks...

CVE-2024-6302

Lack of privilege checking when processing a redaction in Conduit versions v0.6.0 and lower, allowing a local user to redact any message from users on the same server, given that they are able to send redaction events...