13155 matches found
CVE-2025-8597
MacVim's configuration on macOS, specifically the presence of entitlement "com.apple.security.get-task-allow", allows local attackers with unprivileged access e.g. via a malicious application to attach a debugger, read or modify the process memory, inject code in the application's context despite...
CVE-2025-48963
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 40296...
Linux Distros Unpatched Vulnerability : CVE-2025-46416
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account e.g., nixbld or...
Linux Distros Unpatched Vulnerability : CVE-2025-3406
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhwbuildtilesetfromimage of the...
Linux Distros Unpatched Vulnerability : CVE-2020-11986
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to ...
CVE-2025-52856
An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later...
CVE-2025-30273
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following versions: QTS 5.2.5.314...
CVE-2025-52861 VioStor
A path traversal vulnerability has been reported to affect VioStor. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: VioStor 5.1.6...
CVE-2025-52856 VioStor
An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later...
CVE-2025-52856
The CVE-2025-52856 vulnerability affects QNAP VioStor. Description confirms an improper authentication flaw that could allow a remote attacker to compromise the system. The issue is addressed in VioStor 5.1.6 build 20250621 and later, which GPT notes as the fixed version. Connected sources consis...
CVE-2025-30274 QTS, QuTS hero
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and later...
CVE-2025-30271
The CVE-2025-30271 entry describes a path-traversal vulnerability affecting QNAP QTS and QuTS hero. A remote attacker who has an existing user account could read contents of unexpected files or system data. The issue has been addressed in fixed releases: QTS 5.2.5.3145 build 20250526 and later, a...
CVE-2025-30267 QTS, QuTS hero
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following...
CVE-2025-30264 QTS, QuTS hero
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145...
Click Studios Patches Passwordstate Authentication Bypass Vulnerability in Emergency Access Page
Click Studios, the developer of enterprise-focused password management solution Passwordstate, said it has released security updates to address an authentication bypass vulnerability in its software. The high-severity issue, which is yet to be assigned a CVE identifier, has been addressed in...
PT-2025-35294
Name of the Vulnerable Software and Affected Versions: VioStor versions prior to 5.1.6 build 20250621 Description: A path traversal vulnerability exists in VioStor. A remote attacker gaining administrator access can potentially read the contents of unexpected files or system data. Recommendations...
PT-2025-35293
Name of the Vulnerable Software and Affected Versions VioStor versions prior to 5.1.6 build 20250621 Description An improper authentication issue has been reported in VioStor, potentially allowing a remote attacker to compromise system security. Recommendations Update to VioStor version 5.1.6 bui...
CVE-2025-9578
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent Windows before build 40734...
CVE-2025-9578
CVE-2025-9578 affects Acronis Cyber Protect Cloud Agent (Windows) prior to build 40734. A local privilege escalation arises from insecure folder permissions in the agent, enabling a non-privileged user to gain higher privileges on the host. The issue is documented across multiple sources (Red Hat...