27636 matches found
CVE-2025-5464
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-5464
CVE-2025-5464 affects Ivanti Connect Secure (ICS) versions prior to 22.7R2.8. Affected component is the logging subsystem where sensitive information can be inserted into log files, enabling a local authenticated attacker to disclose that information. The documented remediation is to upgrade to I...
CVE-2025-5464
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019
HP Support Assistant is affected by CVE-2025-43019, a local privilege-escalation vulnerability arising from arbitrary file deletion. Connected sources confirm the issue and relate it to the HP Support Assistant product lines, with HP’s advisory HPSBGN04031 noting affected versions and a minimum m...
CVE-2025-6995
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
CVE-2025-6996
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
CVE-2025-6996
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
CVE-2025-36600
Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-6996 Improper Encryption in Ivanti Endpoint Manager
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
CVE-2025-6995
CVE-2025-6995 refers to Ivanti Endpoint Manager and describes an improper use of encryption in the agent that enables a local authenticated attacker to decrypt other users’ passwords. The issue affects versions prior to 2024 SU3 and prior to 2022 SU8 Security Update 1 . Root cause is cryptographi...
CVE-2025-36600
Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-36600
CVE-2025-36600 involves Dell Client Platform BIOS with an Improper Access Control on Mirrored or Aliased Memory Regions in an externally developed component. A high-privilege attacker with local access could potentially achieve code execution. The vulnerability is rooted in improper access contro...
Azure Service Fabric Runtime Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...
USN-7625-1: OnionShare vulnerabilities
It was discovered that OnionShare could be exploited when run with the --debug argument. A local attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2018-19960 It was discovered that OnionShare could be blocke...
CVE-2025-21006
Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory...