Cisco APIC 安全漏洞

Cisco APIC is a software from Cisco USA for automation and management of the Cisco ACI switching matrix. It allows for policy enforcement, health monitoring, network configuration, and more. Cisco APIC has a security vulnerability that originates from insufficient masking of sensitive information...

F5 BIG-IP Next Central Manager Log Message Disclosure Vulnerability

F5 BIG-IP Next Central Manager is a centralized console from F5 USA. A log information disclosure vulnerability exists in F5 BIG-IP Next Central Manager, which originates from the possibility of recording sensitive information in log files when a user logs in using local authentication via the...

Intel Management Engine 访问控制错误漏洞

Intel Management Engine Intel ME is an embedded microcontroller from Intel Corporation USA. An access control error vulnerability exists in Intel Management Engine versions prior to 2422.6.2.0 that stems from improper access control and could allow an authenticated user to elevate privileges via...

CVE-2024-49814

IBM Security Verify Access Appliance 10.0.0 through 10.0.3 could allow a locally authenticated user to increase their privileges due to execution with unnecessary privileges...

CVE-2025-23413

When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager may log sensitive information in the pgaudit log files. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2025-23413 BIG-IP Next Central Manager vulnerability

When users log in through the webUI or API using local authentication, BIG-IP Next Central Manager may log sensitive information in the pgaudit log files. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-2860

The PostgreSQL implementation in Brocade SANnav versions before 2.3.0a is vulnerable to an incorrect local authentication flaw. An attacker accessing the VM where the Brocade SANnav is installed can gain access to sensitive data inside the PostgreSQL database...

PT-2025-5736

Name of the Vulnerable Software and Affected Versions: BIG-IP Next Central Manager affected versions not specified Description: The issue concerns the logging of sensitive information in the pgaudit log files when users log in through the web interface or API using local authentication. This...

CVE-2024-8038

Vulnerable juju introspection abstract UNIX domain socket. An abstract UNIX domain socket responsible for introspection is available without authentication locally to network namespace users. This enables denial of service attacks...

CVE-2024-47475

Dell PowerScale OneFS 8.2.2.x through 9.8.0.x contains an incorrect permission assignment for critical resource vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-47475

CVE-2024-47475 affects Dell PowerScale OneFS 8.2.2.x through 9.8.0.x due to an incorrect permission assignment for a critical resource. A locally authenticated attacker could exploit this to cause a denial of service. Public sources consistently describe the issue as a local-privilege/vulnerabili...

TeamViewer 安全漏洞

TeamViewer is software from TeamViewer, Inc. for remote access as well as remote control and remote maintenance of computers and other end devices. A security vulnerability exists in TeamViewer prior to version 24.12, which stems from insufficient permissions in the Patch and Asset Management...

CVE-2024-52586 eLabFTW MFA bypass

eLabFTW is an open source electronic lab notebook for research labs. A vulnerability has been found starting in version 4.6.0 and prior to version 5.1.0 that allows an attacker to bypass eLabFTW's built-in multifactor authentication mechanism. An attacker who can authenticate locally by knowing o...

CVE-2024-49804

IBM Security Verify Access Appliance 10.0.0 through 10.0.8 could allow a locally authenticated non-administrative user to escalate their privileges due to unnecessary permissions used to perform certain tasks...

CVE-2024-7517

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...

PT-2024-23068 · Ivanti · Ivanti Dsm

Name of the Vulnerable Software and Affected Versions: Ivanti DSM versions prior to 2024.2 Description: The issue allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via an unspecified attack vector. Recommendations: For Ivanti DSM versions pri...

PT-2024-7418

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.3.1 Splunk Enterprise versions prior to 9.2.3 Splunk Enterprise versions prior to 9.1.6 Description: The software potentially exposes plaintext passwords for local native authentication Splunk users when...

PT-2024-10185 · Dell · Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.x Description: The issue is related to an incorrect permission assignment for a critical resource in the PowerScale OneFS operating system. This could allow a locally authenticated attacker...

Vulnerabilities fixed in Cisco IOS XR

Cisco has fixed vulnerabilities in IOS XR. A malicious party could exploit the vulnerabilities to cause a Denial-of-Service, or execute arbitrary code on the vulnerable system. To cause a Denial-of-Service, the malicious party does not need prior authentication. To execute arbitrary code, the...

Beckhoff TwinCAT/BSD Authentication Bypass Using an Alternate Path or Channel (CVE-2024-41173)

The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...