861 matches found
PT-2025-45149
Name of the Vulnerable Software and Affected Versions QuickJS versions prior to eb2c89087def1829ed99630cb14b549d7a98408c Description A flaw exists in QuickJS that allows for a buffer over-read. This issue is related to the js array buffer slice function within the quickjs.c file. Exploitation is...
Astra Linux – Vulnerability in Tiff
A flaw has been discovered in LibTIFF 4.7.0. This flaw affects the functions TIFFmallocExt/TIFFCheckRealloc/TIFFHashSetNew/InitCCITTFax3 in the file tools/tiffcmp.c of the tiffcmp component. Performing certain manipulations can lead to a memory leak. The attack is limited to local execution. This...
EUVD-2025-37004
Dell Unity, versions 5.5 and prior, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution and Elevation of privilege...
USN-7847-1: GNU binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. The attack is restricted to local execution. CVE-2025-11082 It was discovered that GNU binutils incorrectly handled certain inputs. An...
USN-7847-1 binutils vulnerabilities
It was discovered that GNU binutils incorrectly handled certain files. An attacker could possibly use this issue to cause a crash or execute arbitrary code. The attack is restricted to local execution. CVE-2025-11082 It was discovered that GNU binutils incorrectly handled certain inputs. An...
PT-2026-42468
Name of the Vulnerable Software and Affected Versions Trend Micro TrendAI Apex One affected versions not specified TrendAI Apex One as a Service affected versions not specified Description An origin validation issue in the Apex One/SEP agent allows a local attacker to escalate privileges. This fl...
CVE-2025-12247
A weakness has been identified in Hasleo Backup Suite up to 5.2. Impacted is an unknown function of the component HasleoImageMountService/HasleoBackupSuiteService. This manipulation causes unquoted search path. The attack is restricted to local execution. The attack's complexity is rated as high...
EUVD-2025-36136
A weakness has been identified in Hasleo Backup Suite up to 5.2. Impacted is an unknown function of the component HasleoImageMountService/HasleoBackupSuiteService. This manipulation causes unquoted search path. The attack is restricted to local execution. The attack's complexity is rated as high...
CVE-2025-54968
The advisory concerns BAE Systems SOCET GXP before 4.6.0.2. The SOCET GXP Job Service does not require authentication, enabling remote users to submit jobs or local users to submit jobs that execute with another user's permissions. This behavior is documented across multiple sources (NVD/RedHat/C...
Hasleo Backup Suite 代码问题漏洞
Hasleo Backup Suite is a Windows backup and recovery software from Hasleo. A code issue vulnerability exists in Hasleo Backup Suite 5.2 and prior versions that stems from an unquoted search path in the component HasleoImageMountService/HasleoBackupSuiteService, which could lead to a local executi...
EUVD-2025-34278
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code locally...
EUVD-2025-34286
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
EUVD-2025-34308
Use after free in Windows Remote Desktop allows an unauthorized attacker to execute code locally...
Microsoft Excel Remote Code Execution Vulnerability
Access of resource using incompatible type 'type confusion' in Microsoft Office Excel allows an unauthorized attacker to execute code locally...
Microsoft Word Remote Code Execution Vulnerability
Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally...
PT-2025-42121
Name of the Vulnerable Software and Affected Versions Microsoft Office Excel affected versions not specified Description A use-after-free condition exists in Microsoft Office Excel. This occurs when a program attempts to use memory after it has been freed, potentially leading to arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2025-11274
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file...
EUVD-2020-1567
Malware in sbrugna...