PT-2025-15547 · Microsoft · Azure Local

Name of the Vulnerable Software and Affected Versions: Azure Local affected versions not specified Description: The issue is related to improper input validation in Azure Local, which allows an authorized attacker to elevate privileges locally. Recommendations: At the moment, there is no...

DEBIAN-CVE-2025-3136

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.cachingallocatordelete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The...

VulnCheck KEV: CVE-2025-24061

Protection mechanism failure in Windows Mark of the Web MOTW allows an unauthorized attacker to bypass a security feature locally...

UBUNTU-CVE-2025-2914

A vulnerability classified as problematic has been found in HDF5 up to 1.14.6. This affects the function H5FSsinfoSrializeSctcb of the file src/H5FScache.c. The manipulation of the argument sect leads to heap-based buffer overflow. Local access is required to approach this attack. The exploit has...

@mozilla/readability Denial of Service through Regex

Specially crafted titles may have caused a regular expression to excessively backtrack and cause a local denial of service. Additional Details are available at Bugzilla Credit: DayShift...

CVE-2025-25944

Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4RtpAtom::AP4RtpAtom, during the execution of mp4fragment with a crafted MP4 input file...

SUSE CVE-2025-1378

A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to...

UBUNTU-CVE-2025-1378

A vulnerability, which was classified as problematic, was found in radare2 5.9.9 33286. Affected is an unknown function in the library /libr/main/rasm2.c of the component rasm2. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to...

MicroWorld eScan Antivirus 命令注入漏洞

MicroWorld eScan Antivirus is an antivirus software from MicroWorld. A command injection vulnerability exists in MicroWorld eScan Antivirus version 7.0.32. An attacker can exploit this vulnerability to perform operating system command injection locally...

ASB-A-286235483

In applyCustomDescription of SaveUi.java, there is a possible way to view another user's image content. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2025-0720

A vulnerability was found in Microword eScan Antivirus 7.0.32 on Linux. It has been rated as problematic. Affected by this issue is the function removeExtraSlashes of the file /opt/MicroWorld/sbin/rtscanner of the component Folder Watch List Handler. The manipulation leads to stack-based buffer...

CVE-2024-35122 IBM i denial of service

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to a file level local denial of service caused by an insufficient authority requirement. A local non-privileged user can configure a referential constraint with the privileges of a user socially engineered to access the target file...

CVE-2024-35122 IBM i denial of service

IBM i 7.2, 7.3, 7.4, and 7.5 is vulnerable to a file level local denial of service caused by an insufficient authority requirement. A local non-privileged user can configure a referential constraint with the privileges of a user socially engineered to access the target file...

Photon OS 4.0: Libsoup PHSA-2025-4.0-0741

An update of the libsoup package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-4.0-0741. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2025-2206 · Obsproject · Obs Studio

Name of the Vulnerable Software and Affected Versions: obsproject OBS Studio versions up to 30.0.2 Description: A vulnerability has been found in obsproject OBS Studio, affecting an unknown functionality. The manipulation leads to an untrusted search path. The attack needs to be approached locall...

OpenVPN Data Channel Offload 代码问题漏洞

OpenVPN Data Channel Offload OpenVPN DCO is a cutting-edge Linux kernel module from OpenVPN designed to revolutionize the performance of VPN servers and clients. A code issue vulnerability exists in OpenVPN Data Channel Offload version 1.1.1. Exploitation of this vulnerability by an unprivileged...

CVE-2024-12753

Foxit PDF Reader Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Foxit PDF Reader. An attacker must first obtain the ability to execute low-privileged code on the target system in order to explo...

PT-2025-3791 · Iobit · Iobit Protected Folder

Name of the Vulnerable Software and Affected Versions: IOBit Protected Folder versions up to 1.3.0 Description: A problem has been found in the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. This issue leads to null pointer dereference. The attack must be approached...

CVE-2024-31891 IBM Storage Scale privilege escalation

IBM Storage Scale GUI 5.1.9.0 through 5.1.9.6 and 5.2.0.0 through 5.2.1.1 contains a local privilege escalation vulnerability. A malicious actor with command line access to the 'scalemgmt' user can elevate privileges to gain root access to the host operating system...

CVE-2024-31891

IBM Storage Scale GUI 5.1.9.0–5.1.9.6 and 5.2.0.0–5.2.1.1 contain a local privilege escalation vulnerability. A user with command line access to the scalemgmt account can elevate privileges to root on the host OS. Affected versions include 5.1.9.x and 5.2.x prior to fixes. Remediation: upgrade to...