CVE-2026-83118

Oracle E-Business Suite (component: AD Utilities / Applications DBA ) is vulnerable in supported versions 12.2.3 through 12.2.15 . A low-privileged attacker with local logon access can exploit this vulnerability with no user interaction, leading to a full takeover of Applications DBA with high im...

CVE-2026-83071

Oracle Business Intelligence Enterprise Edition (part of Oracle Analytics) has a vulnerability in its Machine Learning component affecting versions 8.2.0.0.0 and 26.01.0.0.0 . The flaw is locally exploitable with low privileges and no user interaction, allowing an attacker with logon access to th...

CVE-2026-76702

HPE Networking EdgeConnect SD-WAN Gateways contain a denial-of-service vulnerability in the operating system. An authenticated local attacker with low privileges can disrupt system operations, potentially leaving the device in an unstable state. The attack requires local access and has high compl...

CVE-2026-0183

In CPM, there is a possible information disclosure due to a confused deputy. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2019-12889

CVE-2019-12889 요약 SailPoint Desktop Password Reset 7.2에는 인증되지 않은 권한 상승 취약점이 존재합니다. Windows 로그온 화면에만 로컬로 접근할 수 있는 사용자는 자신의 권한을 NT AUTHORITY\System으로 상승시킬 수 있습니다. 공격자는 성공적인 악용을 위해 머신에 대한 로컬 접근 권한이 필요합니다. 공격자는 컴퓨터를 로컬 네트워크/WAN에서 분리하고 인터넷에 연결된 액세스 포인트/네트워크에 연결해야 합니다. 그 시점에서 공격자는 비밀번호 재설정 기능을 실행할 수 있으...

CVE-2026-73465 On affected platforms running Arista EOS, under certain circumstances plaintext private keys

On affected platforms running Arista EOS, under certain circumstances plaintext private keys may be written in clear text to log files during operations when specialized non-standard debugging trace levels are explicitly enabled. To exploit these vulnerabilities, a malicious actor must already...

CVE-2026-58721

CVE-2026-58721 is a local information disclosure vulnerability in the GSA subcomponent of Google Pixel devices, caused by uninitialized memory use in multiple locations. Exploitation requires System execution privileges and no user interaction. Google classifies this as Critical severity in the P...

EUVD-2026-79008

In multiple locations, there is a possible information disclosure due to uninitialized memory use. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56958

CVE-2026-56958 is an out-of-bounds read vulnerability in the gf_algo_get_cached_dump_data function of gf_algo.c, caused by a missing bounds check . This defect resides in Qualcomm's Graphics Firmware (GPU) subsystem used in Android devices. The flaw allows local information disclosure with low pr...

EUVD-2026-78971

In validatensbuf of mbuclass.rs, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56945

In VPU, there is a possible out-of-bounds write due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

dirtypipe

참조: https://access.redhat.com/security/vulnerabilities/RHSB-2022-002 진단 현재 시스템이 이 결함의 영향을 받는지 확인하기 위해 취약점 탐지 스크립트가 개발되었습니다. 스크립트의 진위성을 확인하려면 분리된 OpenPGP 서명도 다운로드할 수 있습니다. GPG 서명을 사용한 검증 방법에 대한 지침은 고객 포털에서 확인할 수 있습니다. FAQ Q: 이 결함으로 읽기 전용 콘텐츠가 어떻게 수정될 수 있나요? A: 파일에 접근하면 해당 파일은 메모리의 "캐시된" 영역페이지 캐시에...

Ph-n-t-ch-CVE-2024-40842-XProtectRemediatorDubRobber-Information-Leak-tr-n-macOS

CVE-2024-40842: macOSにおけるXProtectRemediatorDubRobberの情報漏洩 概要 CVE-2024-40842 は、macOSの XProtect Remediator におけるローカル情報漏洩の脆弱性であり、以下のモジュールに関連しています: XProtectRemediatorDubRobber 本脆弱性は、Appleの特権セキュリティプロセスが環境変数 MAGIC を安全に処理しないことに起因します。 マシン上で実行中の悪意のあるアプリケーションは、この動作を悪用して、通常アクセス権のないデータをXProtectに読み込ませることが可能です。...

cve-2024-55591-poc

CVE-2024-55591 - Fortinet FortiOS 認証バイパス CVE-2024-55591 （Fortinet FortiOS に影響する認証バイパス脆弱性）の技術的メカニズムを実演する、Go で書かれた教育目的の実装です。このリポジトリは、セキュリティ研究、防御的分析、および許可されたペネトレーションテストのみを目的としています。 動作の仕組み このツールは、脆弱性のワークフローを反映した2つの主要フェーズ（ターゲット検証と悪用）で構成されています。 フェーズ 1: ターゲット検証と検出 1. 管理インターフェースのプロービング: /login?redir=/ng...

EUVD-2026-78157

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...

Linux Distros Unpatched Vulnerability : CVE-2026-90610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box...

Linux Distros Unpatched Vulnerability : CVE-2026-90685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsrexeccommandlist of the file laser/lsrdec.c of the component...

CVE-2026-90831

A vulnerability was detected in GNU Binutils 2.47. The affected element is the function bfdelfstrtabdelref of the file bfd/elf-strtab.c of the component ELF String Table. The manipulation results in memory corruption. The attack requires a local approach. The exploit is now public and may be used...

CVE-2026-90825

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...

CVE-2026-90825 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free

A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public a...