EUVD-2026-97813

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation...

CVE-2026-104364 IBM® Db2® Denial of Service

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow a local attacker to cause a denial of service due to improper input validation...

CVE-2026-104364

IBM Db2 (Server edition) versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5 across all platforms are vulnerable to a Denial of Service (DoS) attack. The root cause is improper input validation (CWE-20), which could be exploited by a local attacker . To remediate this vulnerability, customer...

CVE-2026-105464

IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows includes DB2 Connect Server could allow a local attacker to gain elevated privileges due to improper privilege management...

CVE-2025-27591

CVE-2025-27591 description Basically below tool allow for universal modification on its log file which lead to privilege escalation as root. details. The log file created by below is world-writable, allowing any user to modify or replace it. An attacker can exploit this by creating a symbolic lin...

CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2021-3493

CVE-2021-3493 Ubuntu OverlayFS Local Privesc Affected Versions Ubuntu 20.10 Ubuntu 20.04 LTS Ubuntu 18.04 LTS Ubuntu 16.04 LTS Ubuntu 14.04 ESM Usage gcc exploit.c -o exploit chmod +x exploit ./exploit Description "Ubuntu specific issue in the overlayfs file system in the Linux kernel where it di...

CVE-2026-85971 Incorrect log file permissions in Progress MarkLogic Server

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 assign overly permissive operating-system permissions to certain log files, which could allow a local user to read or alter log data. The corrected default permissions apply to newly created and rotated logs;...

EUVD-2026-97660

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109358

Edgeless Systems Contrast versions 1.8.0 before 1.24.1 are vulnerable to a privilege escalation flaw due to an incorrect permissions assignment (CWE-732 ). The node installer creates the containerd config with world-writable permissions (0666 ), allowing local unprivileged users to modify the con...

CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109358 Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable 0666. Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate...

CVE-2026-109250

FreeRDP versions 3.0.0 before 3.32.0 are vulnerable to a heap buffer overflow within the collect_keys() function during PKCS#11 key enumeration. A local attacker who controls smartcard tokens can trigger the overflow by presenting more than 64 public key objects across multiple slots. This allows...

CVE-2026-109243

The FreeRDP application, versions 3.0.0 through 3.31.x , is vulnerable to an incorrect permission assignment (CWE-732) in the soft-smartcard component. Specifically, the crypto_write_pem function fails to apply owner-only permissions to private keys. On multi-user Unix hosts, local attackers can ...

CVE-2026-109243

FreeRDP from 3.0.0 before 3.32.0 contains an incorrect permission assignment vulnerability that allows local users to read private keys written by cryptowritepem without owner-only permissions. Attackers on multi-user Unix hosts can enumerate the shared temporary directory during soft-smartcard...

CVE-2024-24488

CVE-2024-24488 An issue in Shenzen Tenda Technology CP3V2.0 V11.10.00.2311090948 allows a local attacker to obtain sensitive information via the password component. Tested Versions CP3V2.0 - V11.10.00.2311090948 CWE CWE-313: Cleartext Storage in a File or on Disk Vulnerability Overview Devices...

CVE-2026-105081

A flaw was found in ImageMagick. The application does not properly validate symbolic links shortcuts pointing to other files during security policy authorization checks. A local attacker can exploit this vulnerability by creating a symbolic link that points to a restricted file path, allowing the...

CVE-2022-37704

Suggested description Amanda 3.5.1 has a flaw that allows privilege escalation from the regular user backup to root. The SUID binary located at /lib/amanda/rundump will execute /usr/sbin/dump as root with controlled arguments from the attacker which may lead to escalation of privileges, denial of...

CVE-2018-19788

CVE-2018-19788 Silly easy exploit for CVE-2018-19788 To use this, you must either create a user with UID INTMAX in Policy Kit or already have a low-priv user with said UID. UID can be specified in user creation as follows, and used before execution of the script: $ useradd -u 4000000001 PrivEsc $...

CVE-2026-108889

A flaw has been found in Yungengxin Cloud Billing 2024.11.28.11. Affected by this vulnerability is the function sub14000443C in the library LWBilling64.sys of the component IOCTL Process Termination. Executing a manipulation of the argument Pid can lead to exposed ioctl with insufficient access...