17343 matches found
CVE-2025-39246
CVE-2025-39246 describes an unquoted service path vulnerability in HikCentral FocSign. An authenticated user could potentially escalate privileges via local access. Affected: HikCentral FocSign (some versions); root cause: unquoted service path. Impact: local privilege escalation. Public details ...
CGM CLININET Information Disclosure Vulnerability
CGM CLININET is a hospital information management system from CGM Germany. An information disclosure vulnerability exists in CGM CLININET. The vulnerability stems from a configuration file that contains database login information and can be read by a local user, which can be exploited by an...
IBM Cognos Command Center Code Execution Vulnerability
IBM Cognos Command Center is a solution for automating business processes that simplifies operational complexity across multiple software environments by allowing users to view, execute and monitor automated processes through a single interface. A code execution vulnerability exists in IBM Cognos...
CVE-2025-20292 Cisco NXOS Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...
Cisco NX-OS Software Command Injection Vulnerability
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute a command injection attack on the underlying operating system of an affected device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. This...
CVE-2025-30063
The configuration file containing database logins and passwords is readable by any local user...
CVE-2025-30063 Excessive permissions on configuration files containing database logins and passwords
The configuration file containing database logins and passwords is readable by any local user...
CVE-2025-30063
Technical details for CVE-2025-30063 are not publicly available in the provided documents. The connected EUVD entries do not reveal affected products, root cause, or remediation for this CVE. Monitor for updates.
CVE-2025-30063 Excessive permissions on configuration files containing database logins and passwords
The configuration file containing database logins and passwords is readable by any local user...
PT-2025-34857 · Cgm · Cgm Clininet
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The configuration file containing database logins and passwords is readable by any local user. Recommendations: At the moment, there is no information about a...
Linux Distros Unpatched Vulnerability : CVE-2025-31160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by...
Linux Distros Unpatched Vulnerability : CVE-2023-43789
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in libXpm where a vulnerability exists due to a boundary condition, a local user can trigger an out-of-bounds read error and read...
aide: improper output neutralization enables bypassing
A flaw was found in AIDE. This flaw allows an attacker to craft a malicious filename by including terminal escape sequences to hide the addition or removal of the file from the report and tamper with the log output. A local user may exploit this to bypass AIDE's detection of malicious files...
Linux Distros Unpatched Vulnerability : CVE-2015-3239
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Off-by-one error in the dwarftounwregnum function in include/dwarfi.h in libunwind 1.1 allows local users to have unspecified impact via invalid dwarf opcodes...
Linux Distros Unpatched Vulnerability : CVE-2008-5150
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sample.sh in maildirsync 1.1 allows local users to append data to arbitrary files via a symlink attack on a /tmp/maildirsync-..log temporary file. CVE-2008-5150...
Linux Distros Unpatched Vulnerability : CVE-2008-4870
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dovecot 1.0.7 in Red Hat Enterprise Linux RHEL 5, and possibly Fedora, uses world-readable permissions for dovecot.conf, which allows local users to obtain the...
Linux Distros Unpatched Vulnerability : CVE-2008-4996
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - init in initramfs-tools 0.92f allows local users to overwrite arbitrary files via a symlink attack on the /tmp/initramfs.debug temporary file. NOTE: the vendor...
Linux Distros Unpatched Vulnerability : CVE-2008-5144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvidia-cg-toolkit-installer in nvidia-cg-toolkit 2.0.0015 allows local users to overwrite arbitrary files via a symlink attack on the...
Linux Distros Unpatched Vulnerability : CVE-2013-4419
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of...
