CVE-2025-49762

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2025-21110

Dell Data Lakehouse, versions prior to 1.5.0.0, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2025-21110

CVE-2025-21110 affects Dell Data Lakehouse versions prior to 1.5.0.0. The issue is an Execution with Unnecessary Privileges vulnerability that a high-privilege, local attacker could exploit to cause a Denial of Service . Multiple sources describe the same flaw and indicate remediation to update t...

CVE-2025-21110

Dell Data Lakehouse, versions prior to 1.5.0.0, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service...

CVE-2025-20220

A vulnerability in the CLI of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper inp...

CVE-2025-20220

A vulnerability in the CLI of Cisco Secure Firewall Management Center FMC Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as root. This vulnerability is due to improper inp...

CVE-2025-20220

CVE-2025-20220 affects Cisco Secure Firewall Management Center (FMC) and Cisco Secure Firewall Threat Defense (FTD) CLI. Root cause: improper input validation for specific CLI commands allows injection of operating-system commands, enabling a local, authenticated attacker to escape the restricted...

CVE-2025-20237

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this...

CVE-2025-20237

Cisco Secure Firewall ASA/FTD (ASA and FTD software) are affected by CVE-2025-20237. The issue stems from insufficient input validation of user-supplied commands, allowing an authenticated, local attacker with administrative credentials to execute arbitrary commands on the underlying OS with root...

CVE-2025-20238

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this...

CVE-2025-20238

A vulnerability in Cisco Secure Firewall Adaptive Security Appliance ASA Software and Cisco Secure Firewall Threat Defense FTD Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system with root-level privileges. To exploit this...

CVE-2025-20238

CVE-2025-20238 affects Cisco Secure Firewall ASA/FTD software. The issue arises from insufficient input validation of user-supplied commands, enabling an authenticated local attacker with valid admin credentials to execute arbitrary commands on the underlying OS with root privileges. Exploitation...

[SECURITY] [DLA 4272-1] aide security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4272-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz August 14, 2025 https://wiki.debian.org/LTS -...

CVE-2025-36612

Dell SupportAssist for Business PCs is affected by an Incorrect Privilege Assignment vulnerability in version 4.5.3 and earlier. A low-privileged attacker with local access could potentially escalate privileges, as described across multiple CVE records and vendor advisories. The issue stems from ...

[SECURITY] [DSA 5977-1] aide security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5977-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso August 14, 2025 https://www.debian.org/security/faq -...

CVE-2025-36581

Dell PowerEdge Platform versions 14G AMD BIOS v1.25.0 and prior, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-36581

Dell PowerEdge Platform versions 14G AMD BIOS v1.25.0 and prior, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-36581

Dell PowerEdge Platform versions 14G AMD BIOS v1.25.0 and prior, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

CVE-2025-40752

A vulnerability has been identified in POWER METER SICAM Q100 7KG9501-0AA01-0AA1 All versions = V2.60 = V2.60 = V2.60 = V2.60 = V2.70 V2.80. Affected devices store the password for the SMTP account as plain text. This could allow an authenticated local attacker to extract it and use the configure...

CVE-2024-54678

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SIMATIC PCS neo V6.0 All versions V6.0 SP1 Update 1, SIMATIC S7-PLCSIM V17 All versions, SIMATIC STEP 7 V17 All versions V17 Update 9, SIMATIC STEP 7 V18 All versions, SIMATIC STEP 7 V19 A...