CVE-2025-50674

An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalate privileges to root...

CVE-2025-50674

A privilege escalation vulnerability exists in OpenMediaVault version 7.4.17 . The flaw is located within the changePassword method in the file /usr/share/php/openmediavault/system/user.inc. This issue allows local authenticated attackers to escalate their privileges to root . As a temporary work...

Novell Zenworks ChangePassword XPath Injection Information Disclosure Vulnerability

Novell ZENworks Configuration Management is the configuration management solution within the ZENworks System Gateway tool. A security vulnerability exists in the ChangePassword RPC method of Novell Zenworks, where, through a malformed query, an attacker combines a reference to a system entity wit...