237 matches found
CVE-2025-20930
Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory...
CVE-2025-20928
Out-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory...
CVE-2025-20930
Samsung Notes contains an out-of-bounds read vulnerability in the JPEG image parsing path, affecting versions prior to 4.4.26.71. The root cause is improper validation when processing JPEG data, allowing a local attacker to read memory outside bounds. A patch is available: update to Samsung Note...
CVE-2025-20927
Out-of-bounds read in parsing image data in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory...
Linux Distros Unpatched Vulnerability : CVE-2023-7192
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A memory leak problem was found in ctnetlinkcreateconntrack in net/netfilter/nfconntracknetlink.c in the Linux Kernel. This issue may allow a local attacker wit...
CVE-2025-20024 Arkcompiler Ets Runtime has an integer overflow vulnerability
in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios...
Linux Distros Unpatched Vulnerability : CVE-2018-16658
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in the Linux kernel before 4.18.6. An information leak in cdromioctldrivestatus in drivers/cdrom/cdrom.c could be used by local attacker...
Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.10 : Intel Microcode vulnerabilities (USN-7269-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7269-1 advisory. Ke Sun, Paul Grosen and Alyssa Milburn discovered that some Intel Processors did not properly implement Finit...
CVE-2024-12673
An improper privilege vulnerability was reported in a BIOS customization feature of Lenovo Vantage on SMB notebook devices which could allow a local attacker to elevate privileges on the system. This vulnerability only affects Vantage installed on these devices: Lenovo V Series Gen 5 ThinkBook 14...
PT-2025-6410 · Telegram · Telegram Android Apk
Name of the Vulnerable Software and Affected Versions: Telegram Android APK version 11.7.0 Description: An issue in the SharedConfig class of Telegram Android APK allows a physically proximate attacker to bypass authentication and escalate privileges by manipulating the return value of the...
CVE-2024-20412
A vulnerability in Cisco Firepower Threat Defense FTD Software for Cisco Firepower 1000, 2100, 3100, and 4200 Series could allow an unauthenticated, local attacker to access an affected system using static credentials. This vulnerability is due to the presence of static accounts with hard-coded...
PT-2025-4187 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to SMR Feb-2025 Release 1 Description: The issue concerns an improper export of Android application components in Settings, allowing local attackers to enable ADB. This could potentially be exploited by attackers with...
unbound: unrestricted reconfiguration enabled to anyone that may lead to local privilege escalation
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an...
Google Android setSkipPrompt method elevation of privilege vulnerability
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by local attackers to submit special requests that can elevate privileges...
giflib: Heap-Buffer Overflow during Image Saving in DumpScreen2RGB Function
A security flaw related to buffer overflow has been identified in GifLib. This flaw allows a nearby attacker to access sensitive information through the DumpSCreen2RGB function in gif2rgb.c...
Dell Precision Rack BIOS 安全漏洞
Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products from Dell USA. An information disclosure vulnerability exists in the Dell Precision Rack BIOS that originates from accessing a memory location after the end of a buffer. A low-privileged attacker with local acces...
CVE-2024-6984
An issue was discovered in Juju that resulted in the leak of the sensitive context ID, which allows a local unprivileged attacker to access other sensitive data or relation accessible to the local charm...
CVE-2024-36078
In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify the gem's files, injecting arbitrary code into Zammad processes which run with the environment and permissions of the Zammad user...
Motorola Phone Extension 安全漏洞
Motorola Phone Extension is a cell phone application from Motorola USA. A security vulnerability exists in Motorola Phone Extension, which stems from an incorrect export vulnerability that could allow a local attacker to perform unauthorized activities...
ASUS RT-N12 安全漏洞
ASUS RT-N12 is a router from Asus China. A security vulnerability exists in the ASUS RT-N12 that originates from storing credentials in clear text, which could allow a local attacker to gain unauthorized access and modify router settings...