CVE-2025-1365

A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function processsymtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local access is required to approach this attack. The explo...

CVE-2025-1365

GNU elfutils 0.192 (eu-readelf) is affected; the vulnerability lives in readelf.c, function process_symtab, where manipulating the D/a argument causes a buffer overflow. Local access is required; exploitation has been disclosed. A patch is identified by git: 5e5c0394d82c53e97750fe7b18023e6f84157b...

CVE-2025-1365 GNU elfutils eu-readelf readelf.c process_symtab buffer overflow

A vulnerability, which was classified as critical, was found in GNU elfutils 0.192. This affects the function processsymtab of the file readelf.c of the component eu-readelf. The manipulation of the argument D/a leads to buffer overflow. Local access is required to approach this attack. The explo...

PT-2025-6897 · Microworld · Microword Escan Antivirus

Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A critical issue has been discovered affecting the sprintf function of the USB Password Handler component. This issue leads to a buffer overflow. The attack must be approached locally,...

PT-2025-6886 · Kong · Kong Insomnia

Name of the Vulnerable Software and Affected Versions: Kong Insomnia versions prior to 10.3.0 Description: A critical issue has been detected in Kong Insomnia, affecting some unknown processing in the library profapi.dll. The manipulation leads to an untrusted search path. An attack must be...

PT-2025-6899 · Microworld · Microword Escan Antivirus

Name of the Vulnerable Software and Affected Versions: MicroWord eScan Antivirus version 7.0.32 Description: A critical vulnerability was found in the USB Password Handler component of MicroWord eScan Antivirus, leading to os command injection. The attack must be approached locally and has a high...

CVE-2024-39286

Incorrect execution-assigned permissions in the Linux kernel mode driver for the IntelR 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2024-21859

Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-21830

Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-30211

Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36280

Uncontrolled search path for some IntelR High Level Synthesis Compiler software before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36291

Uncontrolled search path for some IntelR Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-42405

Uncontrolled search path for some IntelR QuartusR Prime Software before version 23.1.1 Patch 1.01std may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-42410

Improper input validation in some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-42492

Uncontrolled search path element in some BIOS and System Firmware Update Package for IntelR Server M50FCP family before version R01.02.0002 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24852

Uncontrolled search path in some IntelR Ethernet Adapter Complete Driver Pack install before versions 29.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-31068

Improper Finite State Machines FSMs in Hardware Logic for some IntelR Processors may allow privileged user to potentially enable denial of service via local access...

CVE-2024-39813

Uncontrolled search path for some EPCT software before version 1.42.8.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-48267

Improper buffer restrictions in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access...