Lucene search
K

220 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/27 12:0 a.m.1 views

CVE-2025-69689

The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploited by a local attacker to perform actions with administrator-level privileges...

8.8CVSS5.2AI score0.00015EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2026/04/27 12:0 a.m.3 views

PT-2026-35491

The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploited by a local attacker to perform actions with administrator-level privileges...

8.8CVSS5.2AI score0.00015EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/04/27 12:0 a.m.3 views

CVE-2025-69689

The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploited by a local attacker to perform actions with administrator-level privileges...

5.2AI score0.00015EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/27 12:0 a.m.2 views

EUVD-2025-209578

The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploited by a local attacker to perform actions with administrator-level privileges...

8.8CVSS5.2AI score0.00015EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/27 12:0 a.m.7 views

Fan Control 安全漏洞

Fan Control is a cooling fan control software developed by Rémi Mercier. The Fan Control V251 version contains a security vulnerability, which stems from improper handling of Open File Dialog permissions. This vulnerability could allow local attackers to execute operations with administrator...

8.8CVSS5.9AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2026/04/27 12:0 a.m.6 views

CVE-2025-69689

The CVE-2025-69689 entry concerns the Fan Control application (v251) with an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, enabling a local attacker to perform actions with administrator-level privileges. CVS...

8.8CVSS5.2AI score0.00015EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/04/27 12:0 a.m.21 views

CVE-2025-69689

The Fan Control application V251 contains an improper privilege handling vulnerability in its Open File Dialog. The dialog processes user-supplied paths with elevated permissions, which can be exploited by a local attacker to perform actions with administrator-level privileges...

0.00015EPSS
Exploits0References4
EUVD
EUVD
added 2026/04/15 12:31 a.m.3 views

EUVD-2026-22798

Adobe Framemaker versions 2022.8 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could lead to memory exposure. An attacker could leverage this vulnerability to disclose sensitive information stored in memory. Exploitation of this issue requires user interaction in tha...

5.5CVSS5.7AI score0.00025EPSS
Exploits0References2
CVE
CVE
added 2026/04/14 1:12 p.m.7 views

CVE-2025-7389

CVE-2025-7389 describes a vulnerability in the OpenEdge AdminServer component where authenticated users could gain OS-level access and read arbitrary host files via misused methods exposed through the RMI interface, specifically the prototypes like setFile() and openFile() . The issue hinges on t...

8.2CVSS5.9AI score0.00055EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/08 12:0 a.m.0 views

Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-006611)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006611 advisory. In configfsopenfile of file.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with System...

6.7CVSS6AI score0.00015EPSS
Exploits0References4
OSV
OSV
added 2026/03/30 8:16 p.m.0 views

ALPINE-CVE-2026-21716

An incomplete fix for CVE-2024-36137 leaves FileHandle.chmod and FileHandle.chown in the promises API without the required permission checks, while their callback-based equivalents fs.fchmod, fs.fchown were correctly patched. As a result, code running under --permission with restricted...

3.3CVSS7.1AI score0.00006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/03/26 3:9 p.m.1 views

CVE-2026-27215

Substance3D - Painter versions 11.1.2 and earlier are affected by a NULL Pointer Dereference vulnerability that could lead to application denial-of-service. An attacker could exploit this vulnerability to crash the application, causing disruption to its availability. Exploitation of this issue...

5.5CVSS5.8AI score0.00024EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/03/26 8:3 a.m.1 views

scsi: target: Fix recursive locking in __configfs_open_file()

...

5.5CVSS5.8AI score0.00018EPSS
Exploits0
Debian CVE
Debian CVE
added 2026/03/25 10:26 a.m.1 views

CVE-2026-23292

In the Linux kernel, the following vulnerability has been resolved: scsi: target: Fix recursive locking in configfsopenfile In flushwritebuffer, &p-fragsem is acquired and then the loaded store function is called, which, here, is targetcoreitemdbrootstore. This function called filpopen, following...

5.5CVSS5.2AI score0.00018EPSS
Exploits0
SUSE Linux
SUSE Linux
added 2026/03/25 10:10 a.m.2 views

Security update 5.0.7 for Multi-Linux Manager Client Tools

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: Non-customer-facing optimization and update golang-github-boynux-squidexporter: Version update from 1.6.0 to 1.13.0 with the following highlighted changes and fixes jscPED-14971: Added compatibility for Squid 6...

4.6CVSS5.8AI score0.00027EPSS
Exploits1References24
ATTACKERKB
ATTACKERKB
added 2026/03/21 12:47 p.m.5 views

CVE-2019-25560

Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files. Attackers can create a crafted MP3 file with an oversized buffer and trigger the crash by opening the file through the Browse song functionality...

8.7CVSS6AI score0.00079EPSS
Exploits1References4Affected Software1
Fedora
Fedora
added 2026/03/13 1:0 a.m.4 views

[SECURITY] Fedora 42 Update: libmaxminddb-1.13.1-1.fc42

The libmaxminddb library provides a C library for reading MaxMind DB files, including the GeoIP2 databases from MaxMind. This is a custom binary format designed to facilitate fast lookups of IP addresses while allowing for great flexibility in the type of data associated with an address. The...

5.8AI score
Exploits0
NVD
NVD
added 2026/03/10 7:17 p.m.2 views

CVE-2026-27269

Premiere Pro versions 25.5 and earlier are affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

7.8CVSS0.00034EPSS
Exploits0References1
OSV
OSV
added 2026/03/09 9:54 a.m.3 views

SUSE-SU-2026:20709-1 Security update for zlib

This update for zlib fixes the following issues: - CVE-2026-27171: Fixed an infinite loop via the crc32combine64 and crc32combinegen64 functions due to missing checks for negative lengths. bsc1258392 - CVE-2023-45853: Fixed an integer overflow and resultant heap-based buffer overflow in...

9.8CVSS7.1AI score0.01396EPSS
Exploits1References5
OSV
OSV
added 2026/03/02 7:16 p.m.2 views

CVE-2025-48636

In openFile of BugreportContentProvider.java, there is a possible way to read and write unauthorized files due to a path traversal error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

8.4CVSS5.9AI score
Exploits0References1
Rows per page
Query Builder