2905 matches found
CVE-1999-0761
Buffer overflow in FreeBSD fts library routines allows local user to modify arbitrary files via the periodic program...
CVE-1999-0367
NetBSD netstat command allows local users to access kernel memory...
CVE-1999-0907
sccw allows local users to read arbitrary files...
CVE-2019-16285
If a local user has been configured and logged in, an unauthenticated attacker with physical access may be able to extract sensitive information onto a local drive...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000501)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000501 advisory. A stack information leak flaw was found in s390/s390x in the Linux kernels memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout...
CVE-2024-58315
Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorize...
CVE-2025-36154
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...
CVE-2025-36154
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...
CVE-2025-36154
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...
CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...
CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.
IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...
PT-2025-51925
Name of the Vulnerable Software and Affected Versions DriveLock versions 24.1 through 24.1. DriveLock versions 24.2 through 24.2.7 DriveLock versions 25.1 through 25.1.5 Description The DriveLock agent creates directories and files with overly permissive Access Control Lists ACLs. This allows loc...
Honeywell Multiple Industrial Printers Improper Privilege Management (CVE-2017-5671)
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...
CVE-2024-42197
HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...
CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password
HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...
EUVD-2024-55325
HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...
CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password
HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...
PT-2025-50693
HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...
HCL Workload Scheduler 安全漏洞
HCL Workload Scheduler is a workload scheduler from HCL India. A security vulnerability exists in HCL Workload Scheduler that stems from storing user credentials in clear text, which could be read by a local user...
EUVD-2025-202503
MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local...