CVE-2025-64061

The CVE-2025-64061 entry affects Primakon Pi Portal 1.0.18, where the /api/v2/users endpoint exposes an unfiltered list of all registered users due to deficient access control. Any authenticated user, including those with low privileges, can perform a GET request and retrieve user data, with pass...

The vulnerability of the Windows Recovery Environment Agent component on Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Recovery Environment Agent component in Microsoft Windows systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Container Manager Service in Microsoft Windows operating systems allows a perpetrator to escalate their privileges.

The vulnerability of the Windows Container Manager Service in Microsoft Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Container Manager Service in the Windows operating system, related to deficiencies in access control, allows a perpetrator to increase their privileges.

The vulnerability of the Windows Container Manager Service in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the implementation of the access control mechanism for the monitoring module functions of the Mind Server allows a perpetrator to execute arbitrary code.

The vulnerability of the access control mechanism for the monitoring module of the Mind Server relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...