21897 matches found
Linux Distros Unpatched Vulnerability : CVE-2007-2030
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA is invoked...
Linux Distros Unpatched Vulnerability : CVE-2009-1962
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the 1 xfig-epsPID, 2 xfig-picPID.pix, 3 xfig-picPID.err, 4...
Linux Distros Unpatched Vulnerability : CVE-2011-0541
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fuse 2.8.5 and earlier does not properly handle when /etc/mtab cannot be updated, which allows local users to unmount arbitrary directories via a symlink attack...
IBM MQ 安全漏洞
IBM MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable and validated messaging backbone for Service Oriented Architecture SOA. A security vulnerability exists in IBM MQ that stems from storing sensitive information in...
CVE-2024-45674
IBM Security Verify Bridge Directory Sync 1.0.1 through 1.0.12, IBM Security Verify Gateway for Windows Login 1.0.1 through 1.0.10, and IBM Security Verify Gateway for Radius 1.0.1 through 1.0.11 stores potentially sensitive information in log files that could be read by a local user...
IBM Security Verify Bridge和IBM Security Verify Gateway 安全漏洞
IBM Security Verify Bridge and IBM Security Verify Gateway are both products of International Business Machines IBM, U.S.A. IBM Security Verify Bridge is an IBM application component. It provides IBM Cloud access to user attributes and authentication that are controlled by the customer's local LD...
An issue exists AccountService 0.6.37 in the user_change_password_authorized_cb() function in user.c which could let a local users obtain encrypted passwords.
...
Astra Linux – Vulnerability in screen
The socket.c file in GNU Screen, as of version 4.9.0, can be executed with the setuid or setgid flags the default on platforms like Arch Linux and FreeBSD. This allows local users to send a privileged SIGHUP signal to any process ID, potentially causing a denial of service or disrupting the targe...
PT-2025-6483 · Intel · Intel Server Board S2600Bp +3
Name of the Vulnerable Software and Affected Versions: IntelR Server Board S2600WF versions prior to 02.01.0017 IntelR Server Board S2600ST versions prior to 02.01.0017 IntelR Server Board S2600BP versions prior to 02.01.0017 IntelR Server Board M50CYP versions prior to R01.01.0009 IntelR Server...
PT-2025-6638
Name of the Vulnerable Software and Affected Versions IntelR QuickAssist Technology versions prior to 2.2.0 Description The issue is related to an out-of-bounds write that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For versions...
Azure Linux 3.0 Security Update: kernel (CVE-2013-2094)
The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2013-2094 advisory. - The perfsweventinit function in kernel/events/core.c in the Linux kernel before 3.8.9 uses an incorrect integ...
IBM EntireX 安全漏洞
IBM EntireX is a versatile middleware solution from International Business Machines IBM designed to facilitate seamless integration between core enterprise applications and modern applications. A security vulnerability exists in IBM EntireX that stems from the fact that IBM EntireX may allow loca...
CVE-2022-36407
Insertion of Sensitive Information into Log File vulnerability in Hitachi Virtual Storage Platform, Hitachi Virtual Storage Platform VP9500, Hitachi Virtual Storage Platform G1000, G1500, Hitachi Virtual Storage Platform F1500, Hitachi Virtual Storage Platform 5100, 5500, 5100H, 5500H, Hitachi...
CVE-2019-3617
Privilege escalation vulnerability in McAfee Total Protection ToPS for Mac OS prior to 4.6 allows local users to gain root privileges via incorrect protection of temporary files...
CVE-2020-7282
Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to delete files the user would otherwise not have access to via manipulating symbolic links to redirect a McAfee delete action to an unintended file. This is achieved through running a malicious...
CVE-2020-7283
Privilege Escalation vulnerability in McAfee Total Protection MTP before 16.0.R26 allows local users to create and edit files via symbolic link manipulation in a location they would otherwise not have access to. This is achieved through running a malicious script or program on the target machine...
SUSE CVE-2025-24337
WriteFreely through 0.15.1, when MySQL is used, allows local users to discover credentials by reading config.ini...
IBM Common Licensing 安全漏洞
IBM Common Licensing is a license management solution from International Business Machines IBM. IBM Common Licensing suffers from an information disclosure vulnerability that stems from storing user credentials in plain plaintext, which can be exploited by an attacker to cause them to be readable...
CVE-2024-45091
IBM UrbanCode Deploy UCD 7.0 through 7.0.5.24, 7.1 through 7.1.2.10, and 7.2 through 7.2.3.13 stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...
