Siemens SCALANCE W700 Out-of-bounds Write (CVE-2023-1073)

A memory corruption flaw was found in the Linux kernel's human interface device HID subsystem in how a user inserts a malicious USB device. This flaw allows a local user to crash or potentially escalate their privileges on the system. This plugin only works with Tenable.ot. Please visit...

CVE-2024-45673

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user...

CVE-2024-45674

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user...

CVE-2024-45673

IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores user credentials in configuration files which can be read by a local user...

CVE-2024-45673

IBM Security Verify Bridge vulnerabilities CVE-2024-45673 (and related CVE-2024-45674) affect IBM Security Verify Bridge Directory Sync (versions 1.0.1–1.0.12), IBM Security Verify Gateway for Windows Login (1.0.1–1.0.10), and IBM Security Verify Gateway for Radius (1.0.1–1.0.11). The root cause ...

PT-2025-7418 · Ibm · Ibm Security Verify Gateway For Windows Login +2

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Bridge Directory Sync versions 1.0.1 through 1.0.12 IBM Security Verify Gateway for Windows Login versions 1.0.1 through 1.0.10 IBM Security Verify Gateway for Radius versions 1.0.1 through 1.0.11 Description: The issue...

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

CVE-2025-0161

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

CVE-2025-0161 IBM Security Verify Access Appliance code injection

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

CVE-2025-0161 IBM Security Verify Access Appliance code injection

IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation...

CVE-2025-0161

IBM Security Verify Access Appliance (Affecting 10.0.0.0–10.0.9.0 and 11.0.0.0) is vulnerable to local code execution due to improper restrictions on code generation (CWE-94). The IBM Security Bulletin details that a local user could exploit this to execute arbitrary code. Remediation is to upgra...

PT-2025-7457 · Ibm · Ibm Security Verify Access Appliance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access Appliance versions 10.0.0.0 through 10.0.0.9 and version 11.0.0.0 Description: The issue allows a local user to execute arbitrary code due to improper restrictions on code generation. Recommendations: For versions...

SUSE CVE-2024-37020

Sequence of processor instructions leads to unexpected behavior in the IntelR DSA V1.0 for some IntelR XeonR Processors may allow an authenticated user to potentially enable denial of service via local access...

ALPINE-CVE-2023-43758

Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2025-1215

A flaw was found in Vim. A local user may be able to trigger memory corruption by using the --log option with a non-existent path, which can lead to an application crash or other undefined behavior...

Intel AMT和Intel Standard Manageability 安全漏洞

Intel AMT and Intel Standard Manageability are both active management technology modules from Intel Corporation USA. A security vulnerability exists in Intel AMT and Intel Standard Manageability that stems from improper initialization and could allow a privileged user to disclose information via...

Intel QAT 安全漏洞

Intel QAT software refers to the collection of software components that support Intel QuickAssist technology. An untrusted pointer dereference vulnerability exists in Intel QAT software, which can be exploited by an attacker to access compromised information via the local system...

Intel Processors 输入验证错误漏洞

Intel Processors are a family of processors from Intel Corporation USA. Intel Processors suffers from an input validation error vulnerability that stems from improper UEFI firmware input validation, which could allow a privileged user to elevate privileges via local access...

CVE-2024-40586

An Improper Access Control vulnerability CWE-284 in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe...

PT-2025-6660

Name of the Vulnerable Software and Affected Versions: IntelR Advisor versions prior to 2024.2 Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...