17412 matches found
CVE-2024-39870
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.2 SP1. The affected applications can be configured to allow users to manage own users. A local authenticated user with this privilege could use this modify users outside of their own scope as well as to escalate...
Siemens Ruggedcom ROX Use After Free (CVE-2022-3424)
A use-after-free flaw was found in the Linux kernel's SGI GRU driver in the way the first grufileunlockedioctl function is called by the user, where a fail pass occurs in the grucheckchipletassignment function. This flaw allows a local user to crash or potentially escalate their privileges on the...
EUVD-2026-1675
Mastodon is a free, open-source social network server based on ActivityPub. Mastodon 4.3 added notifications of severed relationships, allowing end-users to inspect the relationships they lost as the result of a moderation action. The code allowing users to download lists of severed relationships...
CVE-2026-22246
Mastodon vulnerability (CVE-2026-22246): In 4.3, the severed-relationships notification feature allowed inspecting lost relationships, but the code that downloads lists of severed relationships did not verify the list owner. As a result, any registered local user could enumerate and access the se...
CVE-2025-66002
An Improper Neutralization of Argument Delimiters in a Command 'Argument Injection' vulnerability allows local users ton perform arbitrary unmounts via smb4k mount helper...
Smb4K 安全漏洞
Smb4K is a KDE open source online neighborhood browser. A security vulnerability exists in Smb4K versions prior to 4.0.5 that originates from external control of filenames or paths and could lead to a local user performing a local root attack...
Smb4K 参数注入漏洞
Smb4K is a KDE open source online neighborhood browser. Smb4K suffers from a parameter injection vulnerability that stems from improper parameter delimiter neutralization, which could lead to a local user performing an arbitrary uninstall operation...
CVE-2017-6894
A vulnerability exists in FlexNet Manager Suite releases 2015 R2 SP3 and earlier including FlexNet Manager Platform 9.2 and earlier that affects the inventory gathering components and can be exploited by local users to perform certain actions with elevated privileges on the local system...
CVE-1999-0959
IRIX startmidi program allows local users to modify arbitrary files via a symlink attack...
CVE-1999-0674
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve...
CVE-1999-0476
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user...
CVE-1999-0773
Buffer overflow in Solaris lpset program allows local users to gain root access...
CVE-1999-0504
A Windows NT local user or administrator account has a default, null, blank, or missing password...
CVE-1999-0423
Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges...
CVE-1999-0117
AIX passwd allows local users to gain root access...
CVE-1999-0900
Buffer overflow in rpc.yppasswdd allows a local user to gain privileges via MD5 hash generation...
CVE-1999-0135
admintool in Solaris allows a local user to write to arbitrary files and gain root access...
CVE-1999-0319
Buffer overflow in xmcd 2.1 allows local users to gain access through a user resource setting...