Intel GPA 访问控制错误漏洞

Intel GPA is a tool for graphical application analysis from Intel Corporation USA. An access control error vulnerability exists in Intel GPA versions prior to 2024.3 that stems from improper access control and could allow an authenticated user to enable denial of service via local access...

Intel Ethernet Port Configuration Tool 代码问题漏洞

Intel Ethernet Port Configuration Tool Intel EPCT is a command line utility from Intel Corporation that allows users to change the link type of a device. A code issue vulnerability exists in Intel Ethernet Port Configuration Tool versions prior to 1.42.8.0 that stems from the presence of an...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS. - Obtaining elevated privileges - Circumvention of security measure - Spoofing - Execution of...

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2025-22399

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...

CVE-2024-45718

Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a low- privileged account is required to access the configuration file containing the sensitive data...

Astra Linux – Vulnerability in APR

The lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users to read access to named shared memory segments, potentially exposing sensitive application data. This issue does not affect non-Unix platforms, or builds with APRUSESHMEMSHMGET=1 apr.h. Users...

CVE-2024-45718 Sensitive data disclosure vulnerability

Sensitive data could be exposed to non- privileged users in a configuration file. Local access to the computer with a low- privileged account is required to access the configuration file containing the sensitive data...

CVE-2024-45718

The CVE-2024-45718 vulnerability affects SolarWinds Kiwi Syslog Server NG (pre-1.3.1). Local, low-privilege access can reveal sensitive data stored in configuration files to non-privileged users. Impact is data exposure as described; exploitation details aren’t provided. Remediation: upgrade to v...

CVE-2025-1164

A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management System 1.0. This issue affects some unknown processing of the component Add Record Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approac...

CVE-2025-1164

A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management System 1.0. This issue affects some unknown processing of the component Add Record Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approac...

CVE-2025-1164 code-projects Police FIR Record Management System Add Record stack-based overflow

A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management System 1.0. This issue affects some unknown processing of the component Add Record Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approac...

CVE-2025-1164 code-projects Police FIR Record Management System Add Record stack-based overflow

A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management System 1.0. This issue affects some unknown processing of the component Add Record Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approac...

PT-2025-6487

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via loc...

PT-2025-6641 · Intel · Intel Mc

Name of the Vulnerable Software and Affected Versions: IntelR MLC versions prior to v3.11b Description: The issue concerns a NULL pointer dereference that may allow an authenticated user to potentially enable denial of service via local access. This could be achieved through the exploitation of t...

PT-2025-6626 · Intel · Intel Ethernet Adapter Complete Driver Pack

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapter Complete Driver Pack versions prior to 29.1 Description: The issue is related to an uncontrolled search path in some installations of the IntelR Ethernet Adapter Complete Driver Pack. This could potentially allow an...

PT-2025-6660

Name of the Vulnerable Software and Affected Versions: IntelR Advisor versions prior to 2024.2 Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-6492 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense firmware affected versions not specified Description: The issue is related to improper input validation in the IntelR System Security Report and System Resources Defense firmware, whi...

PT-2025-6491 · Intel · Intel(R) System Security Report/System Resources Defense

Name of the Vulnerable Software and Affected Versions: IntelR System Security Report and System Resources Defense firmware affected versions not specified Description: A race condition in the IntelR System Security Report and System Resources Defense firmware may allow a privileged user to...