Lucene search
+L

2897 matches found

OSV
OSV
added 2025/12/24 7:15 p.m.9 views

CVE-2025-36154

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

6.2CVSS6.1AI score
SaveExploits0References1
NVD
NVD
added 2025/12/24 7:15 p.m.16 views

CVE-2025-36154

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

6.2CVSS0.00095EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/24 7:01 p.m.6 views

CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

6.2CVSS5.7AI score0.00095EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/24 7:01 p.m.41 views

CVE-2025-36154 IBM Concert Software Cleartext Storage in a File or on Disk.

IBM Concert 1.0.0 through 2.1.0 stores sensitive information in cleartext during recursive docker builds which could be obtained by a local user...

6.2CVSS0.00095EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/17 12:00 a.m.8 views

PT-2025-51925

Name of the Vulnerable Software and Affected Versions DriveLock versions 24.1 through 24.1. DriveLock versions 24.2 through 24.2.7 DriveLock versions 25.1 through 25.1.5 Description The DriveLock agent creates directories and files with overly permissive Access Control Lists ACLs. This allows loc...

8.4CVSS6.4AI score0.00113EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/12/16 12:00 a.m.8 views

Honeywell Multiple Industrial Printers Improper Privilege Management (CVE-2017-5671)

Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...

8.8CVSS8.1AI score0.01331EPSS
SaveExploits5References4
RedhatCVE
RedhatCVE
added 2025/12/12 8:15 p.m.11 views

CVE-2024-42197

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

5.5CVSS6.6AI score0.00107EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/11 7:40 p.m.5 views

CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

5.5CVSS6.2AI score0.00107EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/11 7:40 p.m.11 views

EUVD-2024-55325

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

5.5CVSS6.1AI score0.00107EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/11 7:40 p.m.29 views

CVE-2024-42197 HCL Workload Scheduler is vulnerable to plain text storage of a password

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

5.5CVSS0.00107EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/11 12:00 a.m.11 views

PT-2025-50693

HCL Workload Scheduler stores user credentials in plain text which can be read by a local user...

5.5CVSS6.6AI score0.00107EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/11 12:00 a.m.8 views

HCL Workload Scheduler 安全漏洞

HCL Workload Scheduler is a workload scheduler from HCL India. A security vulnerability exists in HCL Workload Scheduler that stems from storing user credentials in clear text, which could be read by a local user...

5.5CVSS6.4AI score0.00107EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/10 9:31 p.m.11 views

EUVD-2025-202503

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local...

6.8CVSS5.8AI score0.00117EPSS
SaveExploits0References4
NVD
NVD
added 2025/12/10 7:16 p.m.9 views

CVE-2025-34428

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.SAV with overly permissive filesystem access. A local...

8.4CVSS0.00117EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/12/09 1:41 p.m.41 views

CVE-2025-12381 Privilege Escalation via Misconfigured Sudoers Entry for Local Users in AlgoSec Firewall Analyzer

Improper Privilege Management vulnerability in AlgoSec Firewall Analyzer on Linux, 64 bit allows Privilege Escalation, Parameter Injection. A local user with access to the command line may escalate their privileges by abusing the parameters of a command that is approved in the sudoers file. This...

6.1CVSS0.00156EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/05 3:27 p.m.10 views

CVE-2025-8074

Origin validation error vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.3-13973 allows local users to write arbitrary files with non-sensitive information via unspecified vectors...

5.6CVSS6.5AI score0.00096EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/02 3:16 a.m.64 views

CVE-2024-45675

IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...

8.4CVSS0.00109EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/12/02 12:00 a.m.8 views

PT-2025-48780

NMIS/BioDose V22.02 and previous versions' installation directory paths by default have insecure file permissions, which in certain deployment scenarios can enable users on client workstations to modify the program executables and libraries...

8CVSS6.9AI score0.00116EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/12/01 1:03 p.m.8 views

CVE-2025-49642

Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory...

5.8CVSS5.2AI score0.00115EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/12/01 1:03 p.m.19 views

CVE-2025-49642 Agent builds for AIX vulnerable to library loading hijacking

Library loading on AIX Zabbix Agent builds can be hijacked by local users with write access to the /home/cecuser directory...

5.8CVSS0.00115EPSS
SaveExploits0References1
Rows per page
Query Builder