1322 matches found
EUVD-2023-12697
Malicious code in bioql PyPI...
EUVD-2022-27064
Malicious code in bioql PyPI...
EUVD-2025-2396
Malicious code in bioql PyPI...
NVIDIA App < 11.0.5.245 Privilege Escalation (CVE-2025-23297)
The remote host is running NVIDIA App, an NVIDIA GPU companion app, whose reported version is prior to 11.0.5.245. It is, therefore, affected by a privilege escalation vulnerability: - NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where ...
CVE-2025-23297
NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2025-23297
CVE-2025-23297 concerns NVIDIA App on Windows. The issue is in the FrameviewSDK installation process within the NVIDIA Installer for NvAPP for Windows, where a local unprivileged attacker could modify files in the Frameview SDK directory, potentially leading to privilege escalation. Documents con...
PT-2025-40302
Name of the Vulnerable Software and Affected Versions NVIDIA Installer for NvAPP for Windows affected versions not specified Description The NVIDIA Installer for NvAPP for Windows has a flaw in the FrameviewSDK installation process. An attacker with local unprivileged access can alter files withi...
CVE-2025-9267
In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without validating their origin or integrity. This behavior can be exploited by placing a malicious DLL in the same directory ...
CVE-2025-9267
In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without validating their origin or integrity. This behavior can be exploited by placing a malicious DLL in the same directory ...
CVE-2025-9267
In Seagate Toolkit on Windows a vulnerability exists in the Toolkit Installer prior to versions 2.35.0.6 where it attempts to load DLLs from the current working directory without validating their origin or integrity. This behavior can be exploited by placing a malicious DLL in the same directory ...
CVE-2025-10491
The MongoDB Windows installation MSI may leave ACLs unset on custom installation directories allowing a local attacker to introduce executable code to MongoDB's process via DLL hijacking. This issue affects MongoDB Server v6.0 version prior to 6.0.25, MongoDB Server v7.0 version prior to 7.0.21 a...
MongoDB Server 安全漏洞
MongoDB Server is a set of open source NoSQL databases from the American company MongoDB. The database provides collection-oriented storage, dynamic querying, data replication and automatic failover. A security vulnerability exists in MongoDB Server v6.0 versions prior to 6.0.25, v7.0 versions...
PT-2025-37717
Name of the Vulnerable Software and Affected Versions: MongoDB Server versions prior to 6.0.25 MongoDB Server versions prior to 7.0.21 MongoDB Server versions prior to 8.0.5 Description: The MongoDB Windows installation MSI may leave Access Control Lists ACLs unset on custom installation...
A flaw was found in the QEMU Guest Agent service for Windows. A local unprivileged user may be able to manipulate the QEMU Guest Agent's Windows installer via repair custom actions to elevate their privileges on the system.
...
Linux Distros Unpatched Vulnerability : CVE-2025-49124
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Untrusted Search Path vulnerability in Apache Tomcat installer for Windows. During installation, the Tomcat installer for Windows used icacls.exe without...
CVE-2025-50173
Weak authentication in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-7973 Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability
A security issue exists in FactoryTalk ViewPoint version 14.0 or below due to improper handling of MSI repair operations. During a repair, attackers can hijack the cscript.exe console window, which runs with SYSTEM privileges. This can be exploited to spawn an elevated command prompt, enabling fu...
Rockwell Automation FactoryTalk Viewpoint 安全漏洞
Rockwell Automation FactoryTalk Viewpoint is a browser plug-in from Rockwell Automation, Inc. A security vulnerability exists in Rockwell Automation FactoryTalk Viewpoint version 14.0 and prior versions, which stems from a mishandled MSI fix operation that could result in elevated privileges...
