27948 matches found
CVE-2025-25269
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation...
CVE-2025-24006
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root...
CVE-2025-24005
A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation...
Trend Micro Cleaner One Pro 安全漏洞
Trend Micro Cleaner One Pro is a computer cleaner and optimization software from Trend Micro. A security vulnerability exists in Trend Micro Cleaner One Pro that stems from an elevation of privilege vulnerability that could allow a local attacker to delete privileged files...
Ubuntu: Security Advisory (USN-7625-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kernel: use-after-free in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c
A use-after-free flaw was found in nfsd4sscsetupdul in fs/nfsd/nfs4proc.c in the NFS filesystem in the Linux Kernel. This issue could allow a local attacker to crash the system or it may lead to a kernel information leak problem...
CVE-2024-49783
IBM OpenPages with Watson 8.3 and 9.0 are affected by CVE-2024-49783, which describes weaker-than-expected encryption data storage. An authenticated remote attacker with database access or a local attacker with server-file access could extract encrypted data and potentially apply additional crypt...
CVE-2025-49737
Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Teams allows an authorized attacker to elevate privileges locally...
CVE-2025-49664
Exposure of sensitive information to an unauthorized actor in Windows User-Mode Driver Framework Host allows an authorized attacker to disclose information locally...
CVE-2025-48811
Missing support for integrity check in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to elevate privileges locally...
CVE-2025-47973
Buffer over-read in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...
CVE-2025-5464
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-5464
Insertion of sensitive information into a log file in Ivanti Connect Secure before version 22.7R2.8 allows a local authenticated attacker to obtain that information...
CVE-2025-5464
CVE-2025-5464 affects Ivanti Connect Secure (ICS) versions prior to 22.7R2.8. Affected component is the logging subsystem where sensitive information can be inserted into log files, enabling a local authenticated attacker to disclose that information. The documented remediation is to upgrade to I...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019
HP Support Assistant is affected by CVE-2025-43019, a local privilege-escalation vulnerability arising from arbitrary file deletion. Connected sources confirm the issue and relate it to the HP Support Assistant product lines, with HP’s advisory HPSBGN04031 noting affected versions and a minimum m...
CVE-2025-6995
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...