2897 matches found
CVE-2025-67859
A Improper Authentication vulnerability in TLP allows local users to arbitrarily control the power profile in use as well as the daemon’s log settings.This issue affects TLP: from 1.9 before 1.9.1...
Lenovo多款产品 安全漏洞
Lenovo ThinkPlus FU100 is a fingerprint USB flash drive.Lenovo ThinkPlus FU100 is a fingerprint USB flash drive.Lenovo ThinkPlus FU200 is a fingerprint USB flash drive.Lenovo ThinkPlus TU800 is a USB flash drive. A security vulnerability exists in a number of Lenovo products, where a locally...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001381)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001381 advisory. A memory leak flaw in the Linux kernel's hugetlbfs memory usage was found in the way the user maps some regions of memory twice using shmget which are aligned to PUD...
Unity Linux 20.1070e Security Update: kernel (UTSA-2026-001414)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001414 advisory. A memory leak flaw was found in the Linux kernels DMA subsystem, in the way a user calls DMAFROMDEVICE. This flaw allows a local user to read random memory from the...
MiracleLinux 3 : kernel-2.6.18-194.13.AXS3 (AXSA:2011-264:04)
The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-264:04 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...
PT-2026-2376
Name of the Vulnerable Software and Affected Versions Wondershare Dr.Fone version 12.0.18 Description Wondershare Dr.Fone version 12.0.18 contains an unquoted service path issue. This allows local users to execute arbitrary code with elevated system privileges. The misconfigured service path can ...
CVE-2026-22246
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...
CVE-2005-1722
Unknown vulnerability in the CoreGraphics Window Server for Mac OS X 10.4.x up to 10.4.1 allows local users to inject arbitrary commands into root sessions...
CVE-2005-1399
FreeBSD 4.6 to 4.11 and 5.x to 5.4 uses insecure default permissions for the /dev/iir device, which allows local users to execute restricted ioctl calls to read or modify data on hardware that is controlled by the iir driver...
CVE-2005-1472
Certain system calls in Apple Mac OS X 10.4.1 do not properly enforce the permissions of certain directories without the POSIX read bit set, but with the execute bits set for group or other, which allows local users to list files in otherwise restricted directories...
CVE-2005-1036
FreeBSD 5.x to 5.4 on AMD64 does not properly initialize the IO permission bitmap used to allow user access to certain hardware, which allows local users to bypass intended access restrictions to cause a denial of service, obtain sensitive information, and possibly gain privileges...
CVE-2005-1675
Groove Virtual Office before 3.1 build 2338, before 3.1a build 2364, and Groove Workspace before 2.5n build 1871 installs the client installation directories with insecure EVERYBODY permissions, which allows local users to gain sensitive information...
CVE-2018-6208
In Max Secure Anti Virus 19.0.3.019,, the driver file MaxProtector32.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x22000d...
CVE-2001-1541
Buffer overflow in Unix-to-Unix Copy Protocol UUCP in BSDI BSD/OS 3.0 through 4.2 allows local users to execute arbitrary code via a long command line argument...
CVE-2003-1323
Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and modify certain files with the privileges of the mail group via unspecified vectors...
CVE-2019-18255
HMI/SCADA iFIX Versions 6.1 and prior allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation...
CVE-2011-0180
Integer overflow in HFS in Apple Mac OS X before 10.6.7 allows local users to read arbitrary 1 HFS, 2 HFS+, or 3 HFS+J files via a crafted FREADBOOTSTRAP ioctl call...
CVE-2023-25682
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.8 and 6.1.0.0 through 6.1.2.1 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 247034...