CVE-2025-42949 Missing Authorization check in ABAP Platform

Due to a missing authorization check in the ABAP Platform, an authenticated user with elevated privileges could bypass authorization restrictions for common transactions by leveraging the SQL Console. This could enable an attacker to access and read the contents of database tables without proper...

PHOENIX CONTACT DaUM 访问控制错误漏洞

Phoenix Contact DaUM is a device management software from Phoenix Contact, Germany. An access control error vulnerability exists in PHOENIX CONTACT DaUM that stems from improper permissions on nssm.exe, which could lead to elevated privileges...

SAP Business One 安全漏洞

SAP Business One is a suite of business management software from the German company SAP. The software includes functions for financial management, operations management and human resource management. A security vulnerability exists in SAP Business One, which stems from a flaw in the authorization...

Intel oneAPI DPC++/C++ Compiler 安全漏洞

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A security vulnerability exists in Intel oneAPI DPC++/C++ Compiler that stems from an improperly set default privilege, which could lead to elevated privileges...

Microsoft Brokering File System 资源管理错误漏洞

Microsoft Brokering File System is a file system from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Brokering File System. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are affected: Windows...

Intel TinyCBOR Library 安全漏洞

Intel TinyCBOR Library is a C language library from Intel Corporation USA. A security vulnerability exists in Intel TinyCBOR Library versions prior to 0.6.1, which stems from uncontrolled recursion and could lead to elevated privileges...

SAP NetWeaver Application Server ABAP 安全漏洞

SAP NetWeaver Application Server ABAP is a platform for running and developing applications based on the ABAP language from SAP, Germany. A security vulnerability exists in SAP NetWeaver Application Server ABAP that stems from an improperly assigned authorization that could lead to elevated...

Intel Processors 安全漏洞

Intel Processors is a family of processors from Intel Corporation USA. A security vulnerability exists in Intel Processors that stems from an improperly isolated stream caching mechanism that could lead to elevated privileges...

Linux Distros Unpatched Vulnerability : CVE-2021-3493

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an...

PT-2025-32626 · Axis · Axis

Name of the Vulnerable Software and Affected Versions: Axis affected versions not specified Description: ACAP applications can be executed with elevated privileges, potentially leading to privilege escalation. This issue can only be exploited if the Axis device is configured to allow the...

Zoom Clients for Windows 安全漏洞

Zoom Clients for Windows is a video conferencing software from Zoom, Inc. A security vulnerability exists in Zoom Clients for Windows that originates from an untrusted search path and could result in elevated privileges...

Intel TDX Module firmware 安全漏洞

Intel TDX Module firmware is a firmware from Intel Corporation USA. A security vulnerability exists in Intel TDX Module firmware versions prior to 1.5.13, which stems from improper locking and may result in elevated privileges...

Linux Distros Unpatched Vulnerability : CVE-2024-21253

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.22. Easily...

CVE-2025-36119 IBM i authentication bypass

IBM i 7.3, 7.4, 7.5, and 7.6 is affected by an authenticated user obtaining elevated privileges with IBM Digital Certificate Manager for i DCM due to a web session hijacking vulnerability. An authenticated user without administrator privileges could exploit this vulnerability to perform actions i...

IBM i 安全漏洞

IBM i is a suite of operating systems from International Business Machines IBM running in IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i versions 7.3, 7.4, 7.5, and 7.6 that stems from Web session hijacking in IBM Digital Certificate Manager for i DCM resulting in...

Linux Distros Unpatched Vulnerability : CVE-2024-23653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner. In addition to running containers as buil...

FUJIFILM FRONTIER DX400W 安全漏洞

FUJIFILM FRONTIER DX400W is a compact photo inkjet printer from Fujifilm FUJIFILM Japan. A security vulnerability exists in the FUJIFILM FRONTIER DX400W that stems from the initial administrator password being guessable, which could result in elevated privileges...

Tigo Energy Cloud Connect Advanced 信任管理问题漏洞

Tigo Energy Cloud Connect Advanced is a compact data logger from Tigo Energy USA. A trust management issue vulnerability exists in Tigo Energy Cloud Connect Advanced, which stems from hard-coded credentials and could lead to elevated privileges...

Bottinelli Informatical Vedo Suite 安全漏洞

Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An access control error vulnerability exists in Bottinelli Informatical Vedo Suite, which can be exploited by an attacker to obtain an elevated privilege JWT...

SATO CL4/6NX Plus和SATO CL4/6NX-J Plus 操作系统命令注入漏洞

SATO CL4/6NX Plus and SATO CL4/6NX-J Plus are both series of smart industrial label printers from SATO Japan. An operating system command injection vulnerability exists in SATO CL4/6NX Plus and SATO CL4/6NX-J Plus versions prior to 1.15.5-r1, which stems from the possibility of executing arbitrar...