27629 matches found
CVE-2025-41698 Draeger: ICMHelper is vulnerable to a privilege escalation due too missing authorization
A low privileged local attacker can interact with the affected service although user-interaction should not be allowed...
CVE-2025-41698
The CVE-2025-41698 entry pertains to Draeger ICMHelper. Affected software: Draeger ICMHelper (client-side service) with vulnerability described as a low-privileged local attacker who can interact with the affected service even when user interaction should be disallowed. Root cause cited in connec...
PT-2025-31917 · Openssl · Openssl
Name of the Vulnerable Software and Affected Versions: affected versions not specified Description: A low privileged local attacker can abuse the affected service by using a hardcoded cryptographic key. Recommendations: At the moment, there is no information about a newer version that contains a...
Dräger ICMHelper 安全漏洞
Dräger ICMHelper is a client-side assistance service software from Dräger, Germany. A security vulnerability exists in Draeger ICMHelper 1.4.0.1 and earlier versions, which originates from a low-privilege local attacker being able to interact with prohibited services...
SUSE SLES15: libsystemd0 / libsystemd0-32bit / libudev1 / libudev1-32bit / etc (SUSE-SU-2025:02675-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02675-1 advisory. - CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump...
PT-2025-31918 · Drager · Draeger Icmhelper
Name of the Vulnerable Software and Affected Versions: Draeger ICMHelper affected versions not specified Description: A low-privileged local attacker can interact with the affected service, despite the intended restriction of user interaction. This issue poses a high-severity risk to healthcare a...
Reachable Assertion
Overview Affected versions of this package are vulnerable to Reachable Assertion due to unscaled-face == NULL assertion failure for cairoftunscaledfontfini in cairo-ft-font.c. An attacker with local access could crash the system by processing a specially crafted PDF file with pdftocairo...
CVE-2025-30097
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
CVE-2025-30098
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
CVE-2025-30096
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
CVE-2025-30098
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
CVE-2025-30096
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Special Elements used in an ...
Security update for systemd
This update for systemd fixes the following issues: CVE-2025-4598: Fixed race condition that allows a local attacker to crash a SUID program and gain read access to the resulting core dump bsc1243935. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods li...
CVE-2025-52327
SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...
CVE-2025-52327
SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...
PT-2025-31643 · Unknown · Restaurant Order System
Name of the Vulnerable Software and Affected Versions: Restaurant Order System version 1.0 Description: A SQL Injection issue exists in Restaurant Order System 1.0. A local attacker can obtain sensitive information via the payment.php file. Recommendations: At the moment, there is no information...
CVE-2025-52327
SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via the payment.php file...
Unspecified Vulnerability in Apple macOS (CNVD-2025-17892)
Apple macOS Sequoia is an operating system from the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.6, which can be exploited by a local attacker to potentially access the Keychain project...
CVE-2025-52327
CVE-2025-52327 affects Restaurant Order System 1.0. The issue is a SQL injection in payment.php that could let a local attacker obtain sensitive information. CVSSv3.1 metrics indicate local access, low attack complexity, and required privileges with high impact to confidentiality, integrity, and ...
