21230 matches found
CVE-2025-29824
CVE-2025-29824 is a Use-After-Free vulnerability in the Windows Common Log File System Driver (CLFS) kernel driver, caused by a race condition in W32PROCESS handling via WaitForInputIdle that enables local privilege escalation to SYSTEM. Microsoft patched this in April 2025 (KB5044284). Public ex...
cifs.upcall makes an upcall to the wrong namespace in containerized environments
...
CVE-2025-3364
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system...
CVE-2025-3364 HGiga PowerStation - Chroot Escape
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system...
CVE-2025-3364 HGiga PowerStation - Chroot Escape
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system...
CVE-2025-3364
CVE-2025-3364 concerns HGiga PowerStation: the SSH service exposes a Chroot Escape vulnerability that, if exploited by a user with root privileges, bypasses chroot restrictions and grants access to the entire filesystem. Multiple sources (NVD, Red Hat, CVE records) describe the issue, but none pr...
CVE-2025-29824: Use After Free
Use after free in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
APSB25-15 : Security update available for Adobe ColdFusion
Adobe has released security updates for ColdFusion versions 2025, 2023 and 2021. These updates resolve critical and important vulnerabilities that could lead to arbitrary file system read, arbitrary code execution and security feature bypass...
Microsoft Windows NTFS Buffer Error Vulnerability
Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing, and logging capabilities. A buffer error vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to elevate privileges...
Microsoft Windows Resilient File System (ReFS) Access Control Vulnerability
Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. An access control error vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit this vulnerability to obtain sensitive information. The following product...
Fortinet FortiWeb path traversal vulnerability
Fortinet FortiWeb is a Web application layer firewall from the U.S. company Fita Fortinet, which can block threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks to ensure the security of Web applications and protect sensitive database content. A...
Microsoft Windows NTFS Buffer Error Vulnerability
Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing, and logging capabilities. A buffer error vulnerability exists in Microsoft Windows NTFS. The following products and editions are affected:Windows 10 Version...
Microsoft Windows NTFS Buffer Error Vulnerability
Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-healing, and logging capabilities. A buffer error vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to obtain sensitive...
HGiga PowerStation security vulnerabilities
HGiga PowerStation is a network load balancing system from China Henderson HGiga. A security vulnerability exists in HGiga PowerStation, which stems from a chroot restriction bypass that could lead to privileged users accessing the entire file system...
Microsoft Windows NTFS Access Control Error Vulnerability
Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. An access control error vulnerability exists in Microsoft Windows NTFS. An attacker could exploit the vulnerability to obtain...
Hewlett Packard Enterprise AOS security vulnerabilities
Hewlett Packard Enterprise AOS HPE AOS is a network operating system for data centers, campuses, and edges from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise AOS that stems from multiple vulnerabilities and allows an authenticated remote attacker to...
PT-2025-15325 · Unknown · Powerstation
Name of the Vulnerable Software and Affected Versions: PowerStation affected versions not specified Description: The issue concerns a Chroot Escape vulnerability in the SSH service, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system. This enabl...
CVE-2025-3364: Execution with Unnecessary Privileges
The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system...
Microsoft Windows Common Log File System Driver Resource Management Error Vulnerability
The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access...