27417 matches found
PT-2026-6094
Name of the Vulnerable Software and Affected Versions Galaxy Wearable versions prior to 2.2.68 Description A flaw exists in Galaxy Wearable when installed on non-Samsung devices due to improper handling of insufficient permissions. This can allow a local attacker to access sensitive information...
PT-2026-6092
Name of the Vulnerable Software and Affected Versions Adobe ShortcutService versions prior to SMR Feb-2026 Release 1 Description A path traversal issue exists in ShortcutService. A privileged local attacker can create a file with system privileges. Recommendations Update Adobe ShortcutService to...
openSUSE 16 Security Update : python-filelock (openSUSE-SU-2026:20144-1)
The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20144-1 advisory. - CVE-2025-68146: TOCTOU race condition may allow local attackers to corrupt or truncate arbitrary user files bsc1255244. - CVE-2026-22701: TOCT...
CVE-2022-50976
A local attacker could cause a full device reset by resetting the device passwords using an invalid reset file via USB...
CVE-2020-37101
VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit the unquoted path in 'C:\Program Files x86\VPN Unlimited' to replace the service executable and gain elevated system...
EUVD-2020-30975
VPN Unlimited 6.1 contains an unquoted service path vulnerability that allows local attackers to inject malicious executables into the service binary path. Attackers can exploit the unquoted path in 'C:\Program Files x86\VPN Unlimited' to replace the service executable and gain elevated system...
CVE-2020-37100 Sync Breeze Enterprise 12.4.18 - Unquoted Service Path
Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations to hijack the...
EUVD-2020-30976
Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations to hijack the...
CVE-2026-0383
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...
CVE-2026-0383
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...
CVE-2026-0383 Information disclosure in Brocade Fabric OS before 9.2.1c2, 9.2.2 through 9.2.2a and 10.0.0
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...
CVE-2026-0383
CVE-2026-0383 : A vulnerability in Brocade Fabric OS allows an authenticated, local attacker with privileges to access the Bash shell and read insecurely stored files, including command history. Affected releases include Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a, and 10.0.0. Remediation/m...
CVE-2026-0383
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...
EUVD-2025-206764
Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may expose higher privilege sensitive information by a lower privileged user...
CVE-2025-58379
CVE-2025-58379 affects Brocade Fabric OS prior to 9.2.1, enabling a local authenticated attacker to reveal command-line passwords by exploiting commands that may expose higher-privilege sensitive information to a lower-privileged user. Connected sources confirm the vulnerable software as Brocade ...
CVE-2025-58379 Password Exposure in Brocade Fabric OS
Brocade Fabric OS before 9.2.1 has a vulnerability that could allow a local authenticated attacker to reveal command line passwords using commands that may expose higher privilege sensitive information by a lower privileged user...
Apple macOS AppleIntelKBLGraphics Out-Of-Bounds Read Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose sensitive information on affected installations of Apple macOS. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2025-69875
CVE-2025-69875 – Quick Heal Total Security 23.0.0 (quarantine management) : The issue is insufficient validation of restore paths and improper permission handling, allowing a low-privileged local user to restore quarantined files into protected system directories, potentially enabling privilege e...
PT-2026-5768
A vulnerability in Brocade Fabric OS could allow an authenticated, local attacker with privileges to access the Bash shell to access insecurely stored file contents including the history command...
PT-2026-5849
Sync Breeze Enterprise 12.4.18 contains an unquoted service path vulnerability that allows local attackers to execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path by placing malicious executables in specific file system locations to hijack the...