HPESBHF04956 rev.1 - Certain HPE ProLiant AMD Servers Using Certain AMD EPYC Processors, AMD-SB-3020: SEV-SNP RMP Initialization Vulnerability, Local Unauthorized Access Vulnerability

Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.9010-03-2025 HPE ProLiant DL325 Gen10 Plus v2 server - Prior to v3.9010-03-2025 HPE ProLiant DL345 Gen10 Plus server - Prior to...

EUVD-2022-37353

Malicious code in bioql PyPI...

CVE-2025-43882

Dell ThinOS 10, versions prior to 250810.0127, contains an Unverified Ownership vulnerability. A local low-privileged attacker could potentially exploit this vulnerability leading to Unauthorized Access...

CVE-2025-1139

IBM Edge Application Manager 4.5 could allow a local user to read or modify resources that they should not have authorization to access due to incorrect permission assignment...

CVE-2025-36613

SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

CVE-2025-36613

SupportAssist for Home PCs versions 4.6.3 and prior and SupportAssist for Business PCs versions 4.5.3 and prior, contains an Incorrect Privilege Assignment vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access...

PT-2025-33289 · Dell · Dell Supportassist For Business Pcs +1

Name of the Vulnerable Software and Affected Versions: SupportAssist for Home PCs versions prior to 4.6.4 SupportAssist for Business PCs versions prior to 4.5.4 Description: SupportAssist for Home PCs and SupportAssist for Business PCs contain an Incorrect Privilege Assignment issue. A local...

Windows NTFS Information Disclosure Vulnerability

Time-of-check time-of-use toctou race condition in Windows NTFS allows an unauthorized attacker to disclose information locally...

CVE-2025-47980

Exposure of sensitive information to an unauthorized actor in Windows Imaging Component allows an unauthorized attacker to disclose information locally...

CVE-2023-46669

Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack. This issue was identified by Elastic engineers and Elastic has no indication that it is known or ha...

CVE-2023-46669

Exposure of sensitive information to local unauthorized actors in Elastic Agent and Elastic Security Endpoint can lead to loss of confidentiality and impersonation of Endpoint to the Elastic Stack. This issue was identified by Elastic engineers and Elastic has no indication that it is known or ha...

QVPN Device Client、QNAP Systems Qsync和QNAP Systems Qfinder Pro 安全漏洞

QNAP Systems QVPN Device Client and others are products of China-based Weilian Technology QNAP Systems.QVPN Device Client is a client software program used to manage connections to VPN servers running on QNAP devices.QNAP Systems Qfinder Pro is a utility for quickly searching and managing a NAS...

HPESBCR04746 rev.1 - Cray ClusterStor Data Services (Lustre), Local Unauthorized Access

Potential Security Impact: Local: Escalation of Privilege, Unauthorized Access to Files SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Cray ClusterStor Data Services prior to Cray Lustre Client 2.15 B11 - https://support.hpe.com/hpesc/docDisplay?docId=a00136907enus&docLocale=enUS...

PT-2024-27563 · Msi · Msi Afterburner

Name of the Vulnerable Software and Affected Versions: MSI Afterburner version 4.6.6.16381 Beta 3 Description: The issue is related to an ACL Bypass vulnerability in the RTCore64.sys driver, which can lead to incorrect authorization and potentially compromise the local system. Recommendations:...

kernel: save/restore speculative MSRs during S3 suspend/resume

A flaw was found in the Linux kernel X86 CPU Power management when resuming CPU from suspend-to-RAM. This issue could allow a local user unauthorized access to memory from the CPU...

CVE-2022-22302

CVE-2022-22302 affects FortiGate versions 6.0.0–6.0.13, 6.2.0–6.2.9, and 6.4.0–6.4.1, plus FortiAuthenticator 5.5.0 and all 6.0/6.1 FortiAuthenticator releases. The issue is a clear-text storage of sensitive information (CWE-312) that may let a local unauthorized user retrieve private keys used f...

CVE-2022-0852

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via e.g. htop or ps. The specific impact varies upon the...

AZL-10137 CVE-2021-4135 affecting package kernel for versions less than 5.15.67.1-4

A memory leak vulnerability was found in the Linux kernel's eBPF for the Simulated networking device driver in the way user uses BPF for the device such that function nsimmapallocelem being called. A local user could use this flaw to get unauthorized access to some data...

Convert2RHEL 信息泄露漏洞

Convert2RHEL is a tool. Automatically convert Oracle/CentOS/Scientific/Rocky/Alma Linux to Red Hat Enterprise Linux. Convert2RHEL suffers from a security vulnerability that stems from the application of the --activationkey option when used with convert2rhel, where the activation key is subsequent...

CVE-2022-23700

A local unauthorized read access to files vulnerability was discovered in HPE OneView versions: Prior to 6.6. HPE has provided a software update to resolve this vulnerability in HPE OneView...