21889 matches found
CVE-1999-0040
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges...
CVE-1999-0462
suidperl in Linux Perl does not check the nosuid mount option on file systems, allowing local users to gain root access by placing a setuid script in a mountable file system, e.g. a CD-ROM or floppy disk...
CVE-1999-0120
Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root...
CVE-1999-0093
AIX nslookup command allows local users to obtain root access by not dropping privileges correctly...
CVE-1999-0056
Buffer overflow in Sun's ping program can give root access to local users...
CVE-1999-0078
pcnfsd aka rpc.pcnfsd allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call...
CVE-2024-56429
itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key found in iLabClient.jar for local users to read or write to the database...
itech iLabClient 安全漏洞
itech iLabClient is a powerful sender-side lab data receiving software from itech. A security vulnerability exists in itech iLabClient version 3.7.1, which stems from the use of the hard-coded key YngAYdgAE/kKZYu2F2wm6w== to allow local users to read and write to the database...
CVE-2024-56429
itech iLabClient 3.7.1 relies on the hard-coded YngAYdgAE/kKZYu2F2wm6w== key found in iLabClient.jar for local users to read or write to the database...
kernel: Information disclosure in vhost/vhost.c:vhost_new_msg()
A vulnerability was found in vhostnewmsg in drivers/vhost/vhost.c in the Linux kernel, which does not properly initialize memory in messages passed between virtual guests and the host operating system in the vhost/vhost.c:vhostnewmsg function. This issue can allow local privileged users to read...
Atop: Heap Corruption
Background Atop is an ASCII full-screen performance monitor for Linux that is capable of reporting the activity of all processes even if processes have finished during the interval, daily logging of system and process activity for long-term analysis, highlighting overloaded system resources by...
DEBIAN-CVE-2025-20054
Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-35471 conda-forge openssl-feedstock writable OPENSSLDIR
conda-forge openssl-feedstock before 066e83c 2024-05-20, on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary co...
Atop 2.4.x < 2.11.1 DoS (CVE-2025-31160)
atop through 2.11.0 allows local users to cause a denial of service e.g., assertion failure and application exit or possibly have unspecified other impact by running certain types of unprivileged processes while a different user runs atop. Note that Nessus has not tested for this issue but has...
CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv0 containing an ANSI terminal escape sequence, leading to a denial of service terminal locked up when netstat is used by a victim...
CVE-2025-32981
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File...
CVE-2025-32981
NETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for the nGeniusCLI File...
CVE-2025-32981
CVE-2025-32981 affects NETSCOUT nGeniusONE prior to 6.4.0 b2350. The issue is due to insecure permissions on the nGeniusCLI File , which could allow a local user to leverage these permissions. The primary consequence is local access/privilege concerns as stated in public records. Affected product...
SUSE CVE-2024-58251
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv0 containing an ANSI terminal escape sequence, leading to a denial of service terminal locked up when netstat is used by a victim...
AZL-60933 CVE-2024-58251 affecting package busybox 1.36.1-22
In netstat in BusyBox through 1.37.0, local users can launch of network application with an argv0 containing an ANSI terminal escape sequence, leading to a denial of service terminal locked up when netstat is used by a victim...