kea: Insecure file permissions can result in confidential information leakage

A vulnerability was found in the Kea package, where an attacker with access to a local unprivileged user may be able to read the logs and DHCP lease information. This can be used to retrieve sensitive information about the DHCP clients and about the Kea process itself...

Fortra Core Privileged Access Manager 安全漏洞

Fortra Core Privileged Access Manager is an access rights management system from Fortra, Inc. A security vulnerability exists in Fortra Core Privileged Access Manager that originates from a local, low-privileged user who may dump cached data...

TencentOS Server 3: osinfo-db and libosinfo (TSSA-2022:0044)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0044 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

TencentOS Server 2: kernel (TSSA-2023:0339)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0339 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities...

TencentOS Server 3: virt:rhel and virt-devel:rhel (TSSA-2022:0022)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0022 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

CVE-2025-1411

IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...

CVE-2025-1411

IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...

CVE-2025-1411 IBM Security Verify Directory Container command execution

IBM Security Verify Directory Container 10.0.0.0 through 10.0.3.1 could allow a local user to execute commands as root due to execution with unnecessary privileges...

CVE-2025-1411

CVE-2025-1411 affects IBM Security Verify Directory Container versions 10.0.0.0–10.0.3.1. The root cause is execution with unnecessary privileges, allowing a local user to run commands as root. Affects the Directory Container and related components (verify-directory-server, -proxy, -webadmin, -vi...

Azure Linux 3.0 Security Update: coreutils (CVE-2016-2781)

The version of coreutils installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2016-2781 advisory. - chroot in GNU coreutils, when used with --userspec, allows local users to escape to the parent session via...

PT-2025-25494 · Ibm · Ibm Security Verify Directory Container

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Directory Container versions 10.0.0.0 through 10.0.3.1 Description: The issue allows a local user to execute commands as root due to execution with unnecessary privileges. This is related to the execution of commands with...

CVE-2025-33112

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...

CVE-2025-3473

IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program...

CVE-2025-3473

Summary: CVE-2025-3473 affects IBM Guardium Data Protection (11.5 and 12.1). A local privileged user can escalate to root due to insecure inherited permissions created by the program (CWE-277). The base CVSS v3.1 score is 6.7 (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). IBM’s security bulletin confirms...

CVE-2025-3473 IBM Security Guardium privilege escalation

IBM Security Guardium 12.1 could allow a local privileged user to escalate their privileges to root due to insecure inherited permissions created by the program...

CVE-2025-33112

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...

CVE-2025-33112

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...

CVE-2025-33112 IBM AIX command execution

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...

CVE-2025-33112 IBM AIX command execution

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...

CVE-2025-33112

CVE-2025-33112 affects IBM AIX 7.3 (TL3) and IBM VIOS 4.1.1, where the Perl implementation does not properly neutralize pathname input, allowing a non-privileged local user to execute arbitrary code. CVSS v3.1 base score 8.4 (HIGH) with local access, no user interaction required, and impacts to c...