Ivanti Endpoint Manager 安全漏洞

Ivanti Endpoint Manager is a comprehensive endpoint management solution developed by Ivanti to unify the management of all types of devices in an enterprise network, including Windows, macOS, Linux, ChromeOS, mobile devices and IoT devices. Ivanti Endpoint Manager suffers from a privilege issue...

PT-2025-46474

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description An issue exists in the Windows Routing and Remote Access Service RRAS where an untrusted pointer dereference can occur. This allows an authorized attack...

PT-2025-46502

Name of the Vulnerable Software and Affected Versions Windows License Manager affected versions not specified Description A flaw exists in Windows License Manager that allows an authorized attacker to disclose sensitive information locally through the insertion of this information into log files...

PT-2025-46465

Name of the Vulnerable Software and Affected Versions Windows Broadcast DVR User Service affected versions not specified Description A use-after-free condition exists in the Windows Broadcast DVR User Service. This allows an authorized attacker to gain elevated privileges on a local system...

PT-2025-46463

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description An out-of-bounds read issue exists in the Windows Bluetooth RFCOM Protocol Driver. A local authorized attacker can potentially disclose information. Recommendations At the moment, there is no...

PT-2025-46468

Name of the Vulnerable Software and Affected Versions Windows versions affected versions not specified Description An issue with access control in the Windows Client-Side Caching CSC Service can allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no...

PT-2025-46460

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description A flaw exists in Windows Routing and Remote Access Service RRAS related to improper link resolution before file access, specifically a 'link following'...

PT-2025-46469

Name of the Vulnerable Software and Affected Versions Windows Hyper-V affected versions not specified Description An out-of-bounds read issue exists in Windows Hyper-V. A local attacker with authorization can potentially disclose information. Recommendations At the moment, there is no information...

PT-2025-46471

Name of the Vulnerable Software and Affected Versions Storvsp.sys affected versions not specified Description An issue exists in the Storvsp.sys driver where an untrusted pointer dereference can occur. This allows a local attacker with authorization to cause a denial of service. Recommendations A...

CVE-2024-57695

The CVE-2024-57695 entry concerns Agnitum Outpost Security Suite versions 7.5.3 (3942.608.1810) and 7.6 (3984.693.1842), where a local attacker can execute arbitrary code via the lock function. The vendor addressed this by releasing version 8.0 (4164.652.1856) on December 17, 2012. Connected docu...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

CVE-2025-12439

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. Chromium security severity: Medium...

USN-7867-1 rust-sudo-rs vulnerabilities

It was discovered that sudo-rs incorrectly handled passwords when timeouts occurred and the pwfeedback default was not set. This could result in a partially typed password being output to standard input, contrary to expectations. It was discovered that sudo-rs incorrectly handled the targetpw and...

CVE-2025-46430

Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of Privileges...

CVE-2025-46430

Dell Display and Peripheral Manager (affected: versions prior to 2.1.2.12) contains an Execution with Unnecessary Privileges vulnerability in the Installer. A low-privilege, local attacker could potentially exploit this to achieve Elevation of Privileges. Remediation exists in version 2.1.2.12 or...

CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

CVE-2025-41731 Jumo: Insufficient entropy in PRNG may lead to root access

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...

EUVD-2025-44036

A vulnerability was identified in the password generation algorithm when accessing the debug-interface. An unauthenticated local attacker with knowledge of the password generation timeframe might be able to brute force the password in a timely manner and thus gain root access to the device if the...