Lucene search
+L

5990 matches found

Cvelist
Cvelist
added 2026/09/08 2:01 a.m.8 views

CVE-2026-75809

Exposed IOCTL with insufficient access control in ASUS Armoury Crate allows a local user to disclosure information and disabling device functionality by bypassing driver authentication and using IOCTLs to read from and write to PCIe configuration space.Refer to the ' Security Update for Armoury...

5.8CVSS
SaveExploits0References1
NVD
NVD
added 2026/09/07 2:17 a.m.3 views

CVE-2026-20515

In gpu, there is a possible system crash due to use after free. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS11122991; Issue ID: MSV-8132...

5.5CVSS0.00148EPSS
SaveExploits0References1
CVE
CVE
added 2026/09/07 1:57 a.m.8 views

CVE-2026-20515

CVE-2026-20515 is a use-after-free vulnerability in the GPU component of MediaTek devices, which can cause a system crash leading to local information disclosure . Exploitation requires low user privileges and user interaction . The CVSS 3.1 score is 5.5 (Medium) with a local attack vector. CISA'...

5.5CVSS5.8AI score0.00148EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/06 8:05 p.m.6 views

CVE-2012-5519

cups-root-file-read.sh ⭐ a bash implementation of the metasploit 'cupsrootfileread.rb' module designed for pentesting and CTFs. mainly a short exercise in bash scripting. intended to be a self-contained program that exploits CVE-2012-5519 on linux systems; it provides the user with an interactive...

7.2CVSS7AI score0.02128EPSS
SaveExploits2
EUVD
EUVD
added 2026/09/04 3:02 p.m.4 views

EUVD-2026-71150

CP4BA - IBM Enterprise Records could allow a local attacker to obtain sensitive information due to the use of a broken or risky cryptographic algorithm...

6.2CVSS5.2AI score0.0011EPSS
SaveExploits0References1
OSV
OSV
added 2026/09/01 12:00 a.m.0 views

PUB-A-511819928

In dosssaesgcm256op of crypto-aes.c, there is a possible out-of-bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/09/01 12:00 a.m.1 views

ASB-A-498588487

In getAllSessions of multiple files, there is a possible confused deputy due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/09/01 12:00 a.m.2 views

PUB-A-512878696

In multiple functions of physmemextmemlinux.c, there is a possible out-of-bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.9AI score
SaveExploits0References1
OSV
OSV
added 2026/09/01 12:00 a.m.1 views

ASB-A-470265726

In multiple locations, there is a possible improper data sanitization due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

5.8AI score
SaveExploits0References1
OSV
OSV
added 2026/09/01 12:00 a.m.2 views

ASB-A-487522353

In onCreate of ConfirmDeviceCredentialActivity.java, there is a possible unauthorized access to and modification of device credentials due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed...

SaveExploits0References1
NVD
NVD
added 2026/08/27 5:20 p.m.8 views

CVE-2026-81684

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

6.9CVSS0.00123EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/08/27 2:50 p.m.8 views

EUVD-2026-67040

In opensslencrypt pip package openssl-encrypt versions /cmdline for the lifetime of the subprocess. Fixed in 1.4.9...

6.9CVSS5.3AI score0.00123EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/27 2:50 p.m.8 views

CVE-2026-81682

openssl_encrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI. The GUI writes decrypted plaintext with world-readable default permissions , allowing unprivileged local users on multi-user systems to read decrypted output files. The CVSS 3.1 score is 6...

8.6CVSS5.2AI score0.00116EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/27 2:50 p.m.32 views

CVE-2026-81682 openssl_encrypt before 1.4.9 Insecure File Permissions

opensslencrypt versions before 1.4.9 contain an insecure file permissions vulnerability in the desktop GUI that writes decrypted plaintext with world-readable default permissions. Attackers can read decrypted output files created by the GUI as unprivileged local users on multi-user systems...

8.6CVSS0.00116EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.9 views

Astra Linux – Vulnerability in Intel Microcode

A observable discrepancy in the RAPL interface of certain Intel processors may allow a privileged user to potentially enable information disclosure through local access...

5.5CVSS6.6AI score0.00419EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in FLAC

In streamencoder.c, there is a potential out-of-bounds write due to a missing bounds check. This could lead to exposure of local information without requiring additional execution privileges. User interaction is not required for exploitation. Product: Android Versions: Android-11 Android ID:...

5.5CVSS6.5AI score0.00465EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.10 views

Astra Linux – Vulnerability in Intel Microcode

Improper access control in some 3rd Generation IntelR XeonR Scalable processors may allow a privileged user to potentially enable information disclosure through local access...

6CVSS6.4AI score0.00249EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.14 views

Astra Linux – Vulnerability in Linux, Linux 5.10

In the handling of offloads in ipgre.c, there is a possibility of a page fault due to an invalid memory access. This could lead to the disclosure of local information without the need for additional execution privileges. User interaction is not required for exploitation. Product: Android Versions...

5.5CVSS5.8AI score0.0018EPSS
SaveExploits0References2
AstraLinux
AstraLinux
added 2026/08/24 10:19 a.m.8 views

Astra Linux – Vulnerability in Xen

Observable discrepancies in response times of some Intel processors may allow authorized users to potentially disclose information through local access...

6.5CVSS6.5AI score0.00372EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2026/08/18 9:28 a.m.5 views

tomcat: Apache Tomcat: Local information disclosure via Unix domain socket TOCTOU race condition

A flaw was found in Apache Tomcat. A Time-of-check Time-of-use TOCTOU race condition exists when creating Unix domain sockets. This vulnerability allows an unauthorized local user to exploit the timing window to gain access to the Unix domain socket. This could lead to information disclosure or...

8.1CVSS5.8AI score0.00452EPSS
SaveExploits0References5
Rows per page
Query Builder