CVE-2024-33580: Uncontrolled Search Path Element

A DLL hijack vulnerability was reported in Lenovo Personal Cloud that could allow a local attacker to execute code with elevated privileges...

CVE-2024-5474: Incorrect Default Permissions

A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versio...

CVE-2024-4130: Uncontrolled Search Path Element

A DLL hijack vulnerability was reported in Lenovo App Store that could allow a local attacker to execute code with elevated privileges...

USN-7061-1: Go vulnerabilities

Hunter Wittenborn discovered that Go incorrectly handled the sanitization of environment variables. An attacker could possibly use this issue to run arbitrary commands. CVE-2023-24531 Sohom Datta discovered that Go did not properly validate backticks as Javascript string delimiters, and did not...

Adobe Commerce security vulnerabilities

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A security vulnerability exists in Adobe Commerce that could be exploited by an attacker to gain unauthorized access or elevated privileges in the...

CVE-2024-47815

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

CVE-2024-47815

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

CVE-2024-47815 Cross-site Scripting in IncidentReporting

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

CVE-2024-47815 Cross-site Scripting in IncidentReporting

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

CVE-2024-47815 Cross-site Scripting in IncidentReporting

IncidentReporting is a MediaWiki extension for moving incident reports from wikitext to database tables. There are a variety of Cross-site Scripting issues, though all of them require elevated permissions. Some are available to anyone who has the editincidents right, some are available to those w...

Vulnerabilities fixed in Microsoft Azure components

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges or execute code with administrator privileges. Azure Monitor: |----------------|------|-------------------------------------| | CVE ID | CVS...

CVE-2024-47196

A vulnerability has been identified in ModelSim All versions V2025.2, Questa All versions V2025.2. vsimk.exe in affected applications allows a specific tcl file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate...

CVE-2024-47196

A vulnerability has been identified in ModelSim All versions V2025.2, Questa All versions V2025.2. vsimk.exe in affected applications allows a specific tcl file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and escalate...

CVE-2024-47195

A vulnerability has been identified in ModelSim All versions V2024.3, Questa All versions V2024.3. gdb.exe in affected applications allows a specific executable file to be loaded from the current working directory. This could allow an authenticated local attacker to inject arbitrary code and...

CVE-2024-47195

CVE-2024-47195 affects Siemens Questa and ModelSim (all versions prior to V2024.3). The issue is an Uncontrolled Search Path Element that allows a local attacker to load a crafted file from the current working directory, enabling arbitrary code execution and privilege escalation when gdb.exe is l...

OpenHarmony security vulnerabilities

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom Foundation 中国开放原子（OAF）基金会. A security vulnerability exists in OpenHarmony version 4.1.0 that originated from allowing a local attacker with elevated privileges to execute arbitrary code in a pre-installed...

Microsoft Windows Storage Port Driver security vulnerabilities

Microsoft Windows Storage Port Driver is a system-supplied storage port driver from Microsoft USA that is especially suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. A security vulnerability exists in the Microsoft Windows Storage Port Driver. A...

vscode -- Visual Studio Code for Linux Remote Code Execution Vulnerability

VSCode developers report: Visual Studio Code for Linux Remote Code Execution Vulnerability A remote code execution vulnerability exists in VS Code 1.94.0 and earlier versions in the elevated save flow...

Linux kernel NFC Unauthorized Access

The vulnerability of the NFC component in the Linux operating system’s kernel involves the parallel use of a shared resource with incorrect synchronization „race condition“. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...

CVE-2024-20492

Cisco Expressway Series contains a local privilege-escalation vulnerability (CVE-2024-20492) in the restricted shell. An authenticated administrator with read-write access can submit crafted CLI commands to escape the restricted shell and gain root on the underlying OS due to insufficient input v...