CVE-1999-0691

Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name...

CVE-1999-0457

Linux ftpwatch program allows local users to gain root privileges...

CVE-1999-0295

Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges...

CVE-1999-0961

HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation...

CVE-1999-0781

KDE allows local users to execute arbitrary commands by setting the KDEDIR environmental variable to modify the search path that KDE uses to locate its executables...

CVE-1999-0134

vold in Solaris 2.x allows local users to gain root access...

CVE-1999-0314

ioconfig on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...

CVE-1999-0413

A buffer overflow in the SGI X server allows local users to gain root access through the X server font path...

CVE-1999-0350

Race condition in the dbloader program in ClearCase gives local users root access by setting SUID bits...

CVE-1999-0044

fsdump command in IRIX allows local users to obtain root access by modifying sensitive files...

CVE-1999-0422

In some cases, NetBSD 1.3.3 mount allows local users to execute programs in some file systems that have the "noexec" flag set...

CVE-2019-12091

The Netskope client service, v57 before 57.2.0.219 and v60 before 60.2.0.214, running with NT\SYSTEM privilege, accepts network connections from localhost. The connection handling function in this service suffers from command injection vulnerability. Local users can use this vulnerability to...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000226)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000226 advisory. The vcpuscanioapic function in arch/x86/kvm/x86.c in the Linux kernel through 4.19.2 allows local users to cause a denial of service NULL pointer dereference and BUG...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000469)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000469 advisory. In the Linux kernel through 5.2.14 on the powerpc platform, a local user can read vector registers of other users' processes via a Facility Unavailable exception. To...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000212)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000212 advisory. The coredump implementation in the Linux kernel before 5.0.10 does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs, whic...

CVE-2025-14979

AirVPN Eddie on macOS is affected by CVE-2025-14979 due to an insecure XPC service that allows local, unprivileged users to escalate privileges to root. Affected version: Eddie 2.24.6. Documented impact is local privilege escalation with high confidentiality/integrity/availability implications. R...

PT-2026-1436

Name of the Vulnerable Software and Affected Versions AirVPN Eddie version 2.24.6 Description The software contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root. Recommendations Update to a newer version that contains a fix for this...

EUVD-2024-55373

Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorize...

CVE-2024-58315

Tosibox Key Service 3.3.0 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the service startup process by inserting malicious code in the system root path, enabling unauthorize...

EUVD-2023-60227

SOUND4 Server Service 4.1.102 contains an unquoted service path vulnerability that allows local non-privileged users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path by inserting malicious code in the system root path that could execute...