497 matches found
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
ZIP Payload Obfuscation Through Parsing Differentials
uv is vulnerable to ZIP payload obfuscation through parsing differentials. The vulnerability is due to improper ZIP archive validation due to failure to reconcile file entries against the central directory, allowing attackers to craft archives with inconsistent or stacked ZIPs that behave...
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
CVE-2025-57797
Concretely, CVE-2025-57797 affects ScanSnap Manager installers prior to V6.5L61. The root cause is an incorrect privilege assignment (CWE-266) which could allow an authenticated local attacker to escalate privileges and execute arbitrary commands. Affected component: ScanSnap Manager installers. ...
CVE-2025-57797
Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...
PT-2025-34836 · Fujitsu · Scansnap Manager
Name of the Vulnerable Software and Affected Versions: ScanSnap Manager versions prior to V6.5L61 Description: An incorrect privilege assignment issue exists in ScanSnap Manager installers. Successful exploitation of this issue could allow an authenticated local attacker to escalate privileges an...
CVE-2025-20017
Uncontrolled search path for some IntelR oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26470
Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20074
Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26470
Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20074
Time-of-check Time-of-use race condition for some IntelR Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20023
Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26470
Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26470
Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-26470
CVE-2025-26470 affects Intel Distribution for Python prior to 2025.1.0. The root cause is incorrect default permissions in the software installers, which may allow an authenticated local user to escalate privileges. Affected product: Intel Distribution for Python (Python distribution from Intel)....
CVE-2025-20087
Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2025-20074
Intel Connectivity Performance Suite installers before version 40.24.11210 are affected by a TOCTOU race condition that may allow an authenticated local user to escalate privileges. Affected product: Intel Connectivity Performance Suite (installer component). Root cause: time-of-check/time-of-use...