The vulnerability of the ProcessWhereClause function in the PolicyServer server of Trend Micro Endpoint Encryption (TMEE) allows attackers to increase their privileges.

The vulnerability of the ProcessWhereClause function in the PolicyServer server, a component of Trend Micro Endpoint Encryption TMEE encryption software, relates to the lack of security measures for handling SQL query structures. Exploiting this vulnerability can allow an attacker to enhance thei...

The vulnerability of the Netmonitor component affects browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird, allowing attackers to escalate their privileges.

The vulnerability of the Netmonitor component in Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

The vulnerability of the HPE OneView IT infrastructure management system, related to insecure privilege management, allows attackers to escalate their privileges.

The vulnerability of the HPE OneView IT infrastructure management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Cisco Catalyst Center (formerly Cisco DNA Center) network infrastructure management system, related to insecure management of privileges, allows attackers to escalate their privileges.

The vulnerability of the Cisco Catalyst Center formerly Cisco DNA Center network infrastructure management system is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to enhance their privileges remotely...

The vulnerability of SonicWall SMA1000, a microcontroller-based network interface controller, allows attackers to enhance their privileges.

The vulnerability of SonicWall SMA1000 microprogrammed network interface controller consoles relates to deficiencies in access control mechanisms. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the software for implementing the hypertext environment MediaWiki, related to deficiencies in the authentication process, allows a violator to increase their privileges.

The vulnerability of the software for implementing the hypertext environment MediaWiki is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the Adobe Experience Manager (AEM) content and media data management system lies in the insufficient protection of website structures, which allows attackers to escalate their privileges.

The vulnerability of the Adobe Experience Manager AEM content and media data management system is related to insufficient protection of the website’s structure. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2025-36924

In ssDecodeLcsAssistDataReqMsgvoid of ssLcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

The vulnerability in the Notification interface of Mozilla Firefox, Firefox ESR, and the email client Thunderbird allows a hacker to escalate their privileges.

The vulnerability in the Notification interface of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations outside the buffer during the processing of DOM objects. Exploiting this vulnerability can allow an attacker to increase their privileges remote...

EUVD-2025-202850

In ssDecodeLcsAssistDataReqMsgvoid of ssLcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36924

In ssDecodeLcsAssistDataReqMsgvoid of ssLcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-36924

In ssDecodeLcsAssistDataReqMsgvoid of ssLcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-36924

A high-severity out-of-bounds write vulnerability exists in the ss_LcsManagement.c component (specifically in the ss_DecodeLcsAssistDataReqMsg function) of the Modem subcomponent on Google Pixel devices. The flaw stems from an incorrect bounds check, which could allow for remote (proximal/adjacen...

CVE-2025-36924

In ssDecodeLcsAssistDataReqMsgvoid of ssLcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2025-202851

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-36923

A heap buffer overflow vulnerability exists in the NrmmDecoder::DecodeSORTransparentContext function within cn_NrmmDecoder.cpp . This flaw allows for an out of bounds write , which could lead to remote (proximal/adjacent) escalation of privilege without requiring additional execution privileges o...

CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

CVE-2025-36923

In NrmmDecoder::DecodeSORTransparentContext of cnNrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote proximal/adjacent escalation of privilege with no additional execution privileges needed. User interaction is not needed for...