PT-2026-2326

Name of the Vulnerable Software and Affected Versions npm cli affected versions not specified Description The npm command-line interface has a flaw related to incorrect permission assignment that can lead to local privilege escalation. This issue allows an attacker to gain elevated privileges on ...

CVE-2024-47025

The CVE-2024-47025 issue is a local information-disclosure in the function ppmp_protect_buf of drm_fw.c. The underlying logic error could allow disclosure of sensitive data without extra privileges, with no user interaction required. Pixel/Android bulletins indicate affected devices can be patche...

UBUNTU-CVE-2024-48423

An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google, an American company. Google Pixel has a security vulnerability that stems from the presence of a local elevation of privilege vulnerability...

SUSE CVE-2024-7540

oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

UBUNTU-CVE-2024-7541

oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this...

PT-2024-38268 · Iobit · Iobit Driver Booster

Name of the Vulnerable Software and Affected Versions: IObit Driver Booster version 11.0.0.0 Description: A critical issue affects some unknown functionality in the library VCL120.BPL of the component BPL Handler, leading to an uncontrolled search path. The manipulation requires a local attack. T...

kernel: vmwgfx: integer overflow in vmwgfx_execbuf.c

An integer overflow was found in the Linux kernel's vmwgfx driver. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, and able to issue an ioctl on the resulting file descriptor to crash the system, causing a denial of service...

PT-2024-4289 · Microsoft · Windows Kernel-Mode Driver +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel-Mode Driver affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource, which can allow an attacker to elevate their privileges. This is a local privilege...

CVE-2024-20879

Improper input validation vulnerability in libsavscmn.so prior to SMR Jun-2024 Release 1 allows local attackers to write out-of-bounds memory...

PUB-A-322327261

In lwisaddcompletionfence of lwisfence.c, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Gradio applications running locally vulnerable to 3rd party websites accessing routes and uploading files

Impact This CVE covers the ability of 3rd party websites to access routes and upload files to users running Gradio applications locally. For example, the malicious owners of www.dontvisitme.com could put a script on their website that uploads a large file to http://localhost:7860/upload and anyon...

CVE-2024-36078

In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify the gem's files, injecting arbitrary code into Zammad processes which run with the environment and permissions of the Zammad user...

TotalAV 安全漏洞

TotalAV is a suite of computer security protection software that supports multiple platforms. The software includes virus protection, anti-phishing and anti-spyware features. A security vulnerability exists in TotalAV version v.6.0.740, which stems from the presence of an insecure privilege...

Samsung Notes 安全漏洞

SAMSUNG Notes is a software application from the South Korean company Samsung SAMSUNG. It is used to provide a note-taking function. A security vulnerability exists in Samsung Notes prior to version 4.4.15 that stems from incorrect input validation allowing a local attacker to delete files with...

PT-2024-22497 · Flipsnack · Flipsnack

Name of the Vulnerable Software and Affected Versions: Flipsnack version 18/03/2024 Description: An issue in Flipsnack allows a local attacker to obtain sensitive information via the reader.gz.js file. Recommendations: For Flipsnack version 18/03/2024, consider restricting access to the...

The vulnerability of the kmap_local() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the kmaplocal function in the Linux operating system’s kernel is related to the doubling of the number of fixmap slots allocated for each processor that are used by kmaplocal. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-51797

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avfshowwaves.c:722:24 in showwavesfilterframe...

CVE-2024-29744

In tmugetgovtimewindows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-21764 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the tmu get tr stats function of tmu.c, which could lead to a possible out of bounds read. This might...