17350 matches found
CVE-2025-33112 IBM AIX command execution
IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...
CVE-2025-33112 IBM AIX command execution
IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input...
CVE-2025-33112
CVE-2025-33112 affects IBM AIX 7.3 (TL3) and IBM VIOS 4.1.1, where the Perl implementation does not properly neutralize pathname input, allowing a non-privileged local user to execute arbitrary code. CVSS v3.1 base score 8.4 (HIGH) with local access, no user interaction required, and impacts to c...
BIT-MARIADB-MIN-2022-31623
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/dscompress.cc, when an error occurs i.e., going to the err label while executing the method createworkerthreads, the held lock thd-ctrlmutex is not released correctly, which allows local users to trigger a denial ...
PT-2025-38699
Name of the Vulnerable Software and Affected Versions Lightspeed affected versions not specified Description A flaw exists in the Lightspeed history service due to insufficient access controls. A local, unprivileged user can access and manipulate the chat history of another user on the same syste...
CVE-2025-3321 Use of Hard-coded Credentials in OnlineSuite
A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server...
CVE-2025-3321
CVE-2025-3321 affects B.Braun OnlineSuite. The issue is a predefined administrative account that is undocumented and cannot be deactivated, exploitable only by local users on the server (not over the network). Impact is high across confidentiality, integrity, and availability according to the CVS...
CVE-2024-45655
IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment...
CVE-2025-0819
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory.This issue...
CVE-2025-0073
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver...
CVE-2025-36564
Dell Encryption Admin Utilities versions prior to 11.10.2 contain an Improper Link Resolution vulnerability. A local malicious user could potentially exploit this vulnerability, leading to privilege escalation...
CVE-2024-45655
IBM Application Gateway 19.12 through 24.09 could allow a local privileged user to perform unauthorized actions due to incorrect permissions assignment...
CVE-2024-45655
CVE-2024-45655 affects IBM Application Gateway versions 19.12–24.09. The root cause is incorrect permissions assignment enabling a local privileged user to perform unauthorized actions. Documented impacts confirm local privilege escalation with the vulnerability. Remediation: IBM indicates upgrad...
Keiyo System PC Time Tracer 安全漏洞
Keiyo System PC Time Tracer is a time tracking software for any workflow from Keiyo System, Japan. A security vulnerability exists in Keiyo System PC Time Tracer versions prior to 5.2, which stems from improper default permissions that could cause a locally authenticated user to execute arbitrary...
PT-2025-23619 · Ibm · Ibm Application Gateway
Name of the Vulnerable Software and Affected Versions: IBM Application Gateway versions 19.12 through 24.09 Description: The issue allows a local privileged user to perform unauthorized actions due to incorrect permissions assignment. Recommendations: For IBM Application Gateway versions 19.12...
CVE-2025-0819
Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU memory processing operations to gain access to already freed memory.This issue...
CVE-2025-0073
Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform improper GPU memory processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver...
CVE-2025-4134
Lack of file validation in doupdatevps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write...
Fedora: Security Advisory (FEDORA-2024-e457d67157)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...