Lucene search
+L

17273 matches found

AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability in Intel Microcode

An uncaught exception occurred in the core management mechanism for some IntelR processors. This may allow an authenticated user to potentially enable denial of service through local access...

6.8CVSS6.8AI score0.00167EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.13 views

Astra Linux – Vulnerability in Intel Microcode

Improper input validation in the UEFI firmware CseVariableStorageSmm for some Intel processors may allow a privileged user to potentially enable privilege escalation through local access...

8.7CVSS7.2AI score0.00254EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability in Intel Microcode

Improper isolation in the IntelR CoreTM Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privileges through local access...

7.8CVSS6.4AI score0.00237EPSS
SaveExploits0References3
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability in Intel Microcode

Improper finite state machines in the hardware logic of some 4th and 5th generation IntelR XeonR processors may allow an authorized user to potentially enable denial of service via local access...

5.7CVSS5.8AI score0.00226EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.6 views

TencentOS Server 4: aide (TSSA-2025:0118)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0118 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

7.8CVSS7.7AI score0.00493EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.10 views

TencentOS Server 4: rear (TSSA-2024:0898)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2024:0898 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

5.5CVSS5.7AI score0.00291EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/06/16 12:00 a.m.11 views

TencentOS Server 3: open-vm-tools (TSSA-2022:0159)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2022:0159 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

7.8CVSS7AI score0.0054EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/06/14 4:03 p.m.13 views

CVE-2025-36573

Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability. A user with local access could potentially exploit this vulnerability, leading to Information disclosure...

7.1CVSS6.7AI score0.00143EPSS
SaveExploits0References1
CNVD
CNVD
added 2025/06/13 12:00 a.m.14 views

Dell Dock Firmware Information Disclosure Vulnerability

Dell Dock Firmware is a firmware product from Dell USA. An information disclosure vulnerability exists in Dell Dock Firmware in versions prior to 01.00.08.01. The vulnerability is due to the insertion of sensitive information into a log file in the affected version, so information may be disclose...

7.1CVSS6.1AI score0.00143EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/12 9:15 p.m.23 views

CVE-2025-27689

Dell iDRAC Tools, versions prior to 11.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

7.8CVSS0.00129EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/12 8:15 p.m.13 views

CVE-2025-4417

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

6.9CVSS0.00149EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/12 7:32 p.m.23 views

CVE-2025-4417 AVEVA PI Connector for CygNet Cross-site Scripting

A cross-site scripting vulnerability exists in AVEVA PI Connector for CygNet Versions 1.6.14 and prior that, if exploited, could allow an administrator miscreant with local access to the connector admin portal to persist arbitrary JavaScript code that will be executed by other users who visit...

6.9CVSS0.00149EPSS
SaveExploits0References2
CVE
CVE
added 2025/06/12 7:32 p.m.78 views

CVE-2025-4417

CVE-2025-4417 – AVEVA PI Connector for CygNet Affected product: AVEVA PI Connector for CygNet, version 1.6.14 and prior. Vulnerability: Cross-site scripting (XSS) that, if exploited, could let an administrator with local access to the connector admin portal persist arbitrary JavaScript code to be...

6.9CVSS6.3AI score0.00149EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/06/12 3:18 p.m.22 views

CVE-2025-36573

Dell Smart Dock Firmware, versions prior to 01.00.08.01, contain an Insertion of Sensitive Information into Log File vulnerability. A user with local access could potentially exploit this vulnerability, leading to Information disclosure...

7.1CVSS0.00143EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/06/12 12:00 a.m.16 views

PT-2025-25331 · Dell · Dell Smart Dock Firmware

Name of the Vulnerable Software and Affected Versions: Dell Smart Dock Firmware versions prior to 01.00.08.01 Description: The issue concerns an Insertion of Sensitive Information into Log File, which could be exploited by a user with local access, potentially leading to information disclosure...

7.1CVSS5.8AI score0.00143EPSS
SaveExploits0References8
NVD
NVD
added 2025/06/10 5:23 p.m.16 views

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS0.00593EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/10 5:23 p.m.3 views

CVE-2025-33075

Improper link resolution before file access 'link following' in Windows Installer allows an authorized attacker to elevate privileges locally...

7.8CVSS5.8AI score0.00593EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/10 5:22 p.m.12 views

CVE-2025-33060

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...

5.5CVSS0.0057EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/10 5:22 p.m.9 views

CVE-2025-33059

Out-of-bounds read in Windows Storage Management Provider allows an authorized attacker to disclose information locally...

5.5CVSS0.0057EPSS
SaveExploits0References1
NVD
NVD
added 2025/06/10 5:22 p.m.9 views

CVE-2025-32721

Improper link resolution before file access 'link following' in Windows Recovery Driver allows an authorized attacker to elevate privileges locally...

7.3CVSS0.0064EPSS
SaveExploits0References1
Rows per page
Query Builder