CVE-2025-13152

A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-12046

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions...

CVE-2025-13155

An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-13152

A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges...

CVE-2025-13152

A potential DLL hijacking vulnerability was reported in Lenovo One Client during an internal security assessment that could allow a local authenticated user to execute code with elevated privileges...

EUVD-2025-202423

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions...

CVE-2025-12046

Technical details (affected products, components, conditions, impact, fixes) are not publicly provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2025-12046

A DLL hijacking vulnerability was reported in the Lenovo App Store and Lenovo Browser applications that could allow a local authenticated user to execute code with elevated privileges under certain conditions...

CVE-2025-41750

An XSS vulnerability in pxcPortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-level...

CVE-2025-41747

An XSS vulnerability in pxcvlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to...

CVE-2025-41745

An XSS vulnerability in pxcportCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management WBM. The vulnerability does not provide access to system-leve...

CVE-2025-13070

The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users such as contributor to perform LFI attacks...

PT-2025-50585

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 15.6 through 18.4.6 GitLab CE/EE versions 18.5 through 18.5.4 GitLab CE/EE versions 18.6 through 18.6.2 Description GitLab has addressed an issue that could allow an authenticated user to reveal sensitive information...

Chyrp 跨站脚本漏洞

Chyrp is a lightweight blogging engine. A cross-site scripting vulnerability exists in Chyrp version 2.5.2, which originates from an authenticated user being able to inject malicious script into post titles, potentially leading to a stored cross-site scripting attack...

Lenovo One Client 安全漏洞

Lenovo One Client is a one-stop service and system management software from Lenovo China. A security vulnerability exists in Lenovo One Client that stems from a potential DLL hijacking that could lead to the execution of arbitrary code by a locally authenticated user...

PT-2025-50366

MailEnable versions prior to 10.54 contain a cleartext storage of credentials vulnerability that can lead to local credential compromise and account takeover. The product stores user and administrative passwords in plaintext within AUTH.TAB with overly permissive filesystem access. A local...

Lenovo Baiying Client 安全漏洞

Lenovo Baiying Client is a digital service and device management platform from Lenovo China. A security vulnerability exists in Lenovo Baiying Client that stems from improper privileges and could lead to the execution of arbitrary code by a locally authenticated user...

appRain CMF 代码问题漏洞

appRain CMF is a content management framework from appRain Canada. A code issue vulnerability exists in appRain CMF version 4.0.5 that originates from an authenticated user being able to upload a malicious PHP file via the file manager, which could lead to remote code execution...

PT-2025-50573

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 18.4 through 18.4.5 GitLab CE/EE versions 18.5 through 18.5.3 GitLab CE/EE versions 18.6 through 18.6.1 Description GitLab CE/EE is affected by an issue where an authenticated user could potentially perform unauthorized...

Zoom Rooms for macOS 安全漏洞

Zoom Rooms for macOS is a conference room software from Zoom USA. A security vulnerability exists in Zoom Rooms for macOS prior to version 6.6.0, which originates from an external control over file names or paths, and could cause an authenticated user to disclose information via local access...