EUVD-2026-119881

A vulnerability has been found in wummel patool 4.1.0. This vulnerability affects the function extractgzip of the file patoolib/fileutil.py of the component Gzip Extraction Handler. The manipulation leads to symlink following. Local access is required to approach this attack. The researcher claim...

CVE-2026-124584

A vulnerability exists in wummel patool 4.1.0 within the Gzip Extraction Handler component. Specifically, the extract_gzip function in patoolib/fileutil.py is susceptible to symlink following (CWE-61, CWE-59). An attacker with local access can manipulate this behavior to achieve unauthorized file...

CVE-2021-36934

CVE-2021-36934 python secretsdump.py -sam C:\Windows\Temp\SAM -security C:\Windows\Temp\SECURITY -system C:\Windows\Temp\SYSTEM LOCAL...

CVE-2026-19703

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings...

CVE-2026-19703

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings...

EUVD-2026-118432

A weak password hashing vulnerability has been identified on SonicOS virtual appliances, which in specific conditions could potentially enable an attacker with existing local access to disclose a platform credential. The credential provides access to a limited subset of platform settings...

CVE-2026-19703

A weak password hashing vulnerability exists in SonicOS virtual appliances . Under specific conditions, an attacker with existing local access could exploit this weakness (associated with CWE-798 and CWE-916 ) to disclose a platform credential. This credential grants access to a limited subset of...

CVE-2026-123665

A weakness exists in kubescape versions up to 4.0.15 within the Output component. Specifically, the GetWriter function in the file core/pkg/resultshandling/printer/printresults.go is susceptible to manipulation of the outputFile argument. This flaw can lead to permission issues (CWE-275, CWE-266)...

EUVD-2026-118274

A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access...

CVE-2026-123665 kubescape Output printresults.go GetWriter permission

A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access...

CVE-2026-123665: n/a kubescape: A weakness has been identified in kubescape up to 4.0.15

A weakness has been identified in kubescape up to 4.0.15. Impacted is the function GetWriter of the file core/pkg/resultshandling/printer/printresults.go of the component Output. Executing a manipulation of the argument outputFile can lead to permission issues. The attack requires local access...

CVE-2026-112910

filelock is a platform-independent file lock for Python. From 3.10.0 until 4.2.1, filelock on Windows ignores the mode argument for WindowsFileLock files and the ReadWriteLock SQLite database. A lock created with mode=0o600 receives the parent directory's inheritable ACL because opennonreparsefd...

openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...

openjdk: Enhance jmod handling (Oracle CPU 2026-10)

A flaw was found in openjdk. An unauthenticated attacker with local access to the host system could leverage this vulnerability in the Libraries component by convincing a user to interact with a malicious application or by supplying crafted input through exposed application programming interfaces...

openjdk: Enhance Preferences (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Utility component. An unauthenticated attacker with local system access or the ability to supply data to affected application programming interfaces APIs can exploit this vulnerability. Successful exploitation can result in unauthorized data access, allowing an...

openjdk: Enhance jmod handling (Oracle CPU 2026-10)

A flaw was found in openjdk. An unauthenticated attacker with local access to the host system could leverage this vulnerability in the Libraries component by convincing a user to interact with a malicious application or by supplying crafted input through exposed application programming interfaces...

CVE-2026-49405

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the local server exposes the server-sent events endpoint at /events without bearer authentication, permits cross-origin browser access, and uses only a caller-supplied clientid to select...

CVE-2026-49393

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0, the core server protects HTTP POST requests to /rpc with bearer middleware but exposes Socket.IO rpc:request and chat:start handlers without equivalent transport or handler-level...

openjdk: Enhance Preferences (Oracle CPU 2026-10)

A flaw was found in the OpenJDK Utility component. An unauthenticated attacker with local system access or the ability to supply data to affected application programming interfaces APIs can exploit this vulnerability. Successful exploitation can result in unauthorized data access, allowing an...

openjdk: Enhance diagnostic sessions (Oracle CPU 2026-10)

A flaw was found in OpenJDK's Serviceability component. An unauthenticated attacker with local access to the host system can exploit this vulnerability with user interaction, such as by supplying crafted input to Serviceability application programming interfaces APIs. A successful attack can resu...