27839 matches found
nginx: Memory disclosure in the ngx_http_mp4_module
A vulnerability was found in NGINX’s module, ngxhttpmp4module. This flaw allows a local attacker to cause a worker process crash or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module...
nginx: Memory corruption in the ngx_http_mp4_module
A vulnerability was found in NGINX's module, ngxhttpmp4module. This flaw allows a local attacker to corrupt NGINX worker memory, resulting in its termination using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module when the mp4 directive is...
nginx: Memory corruption in the ngx_http_mp4_module
A vulnerability was found in NGINX's module, ngxhttpmp4module. This flaw allows a local attacker to corrupt NGINX worker memory, resulting in its termination using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module when the mp4 directive is...
nginx: Memory disclosure in the ngx_http_mp4_module
A vulnerability was found in NGINX’s module, ngxhttpmp4module. This flaw allows a local attacker to cause a worker process crash or might result in worker process memory disclosure by using a specially crafted audio or video file. The issue affects only NGINX products built with ngxhttpmp4module...
CVE-2024-57096
An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...
CVE-2024-57096
The CVE-2024-57096 entry concerns Kingsoft WPS Office. Affected software: WPS Office versions prior to 19302. Vulnerability: exposure that allows a local attacker to obtain sensitive information via a crafted file. Root cause details are not explicitly provided in the documents, so the mechanism ...
CVE-2024-57096
An issue in wps office before v.19302 allows a local attacker to obtain sensitive information via a crafted file...
CVE-2025-32706
Improper input validation in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-29955
Improper input validation in Windows Hyper-V allows an unauthorized attacker to deny service locally...
CVE-2025-29829
Use of uninitialized resource in Windows Trusted Runtime Interface Driver allows an authorized attacker to disclose information locally...
CVE-2025-0035
Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2024-36321
Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2025-0035
Unquoted search path within AMD Cloud Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2024-36321
Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2024-36321
Unquoted search path within AIM-T Manageability Service can allow a local attacker to escalate privileges, potentially resulting in arbitrary code execution...
CVE-2025-22460
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges...
CVE-2025-22460
Default credentials in Ivanti Cloud Services Application before version 5.0.5 allows a local authenticated attacker to escalate their privileges...
CVE-2025-22460
Ivanti Cloud Services Application (CSA) is affected by CVE-2025-22460 due to default credentials in versions prior to 5.0.5. The vulnerability enables a local, authenticated attacker to escalate privileges (local privilege escalation) with high impact. The CVSS vector indicates LOCAL attack, low ...