27949 matches found
CVE-2025-6996
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
CVE-2025-6996
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
CVE-2025-36600
Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-6996 Improper Encryption in Ivanti Endpoint Manager
Improper use of encryption in the agent of Ivanti Endpoint Manager before version 2024 SU3 and 2022 SU8 Security Update 1 allows a local authenticated attacker to decrypt other users’ passwords...
CVE-2025-6995
CVE-2025-6995 refers to Ivanti Endpoint Manager and describes an improper use of encryption in the agent that enables a local authenticated attacker to decrypt other users’ passwords. The issue affects versions prior to 2024 SU3 and prior to 2022 SU8 Security Update 1 . Root cause is cryptographi...
CVE-2025-36600
Dell Client Platform BIOS contains an Improper Access Control Applied to Mirrored or Aliased Memory Regions vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution...
CVE-2025-36600
CVE-2025-36600 involves Dell Client Platform BIOS with an Improper Access Control on Mirrored or Aliased Memory Regions in an externally developed component. A high-privilege attacker with local access could potentially achieve code execution. The vulnerability is rooted in improper access contro...
Azure Service Fabric Runtime Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Service Fabric allows an authorized attacker to elevate privileges locally...
USN-7625-1: OnionShare vulnerabilities
It was discovered that OnionShare could be exploited when run with the --debug argument. A local attacker could possibly use this issue to access sensitive information. This issue only affected Ubuntu 16.04 LTS and Ubuntu 18.04 LTS. CVE-2018-19960 It was discovered that OnionShare could be blocke...
CVE-2025-21006
Out-of-bounds write in handling of macro blocks for MPEG4 codec in libsavsvc.so prior to Android 15 allows local attackers to write out-of-bounds memory...
CVE-2025-20997
Incorrect default permission in Framework for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to reset some configuration of Galaxy Watch...
CVE-2025-21004
Improper verification of intent by broadcast receiver in System UI for Galaxy Watch prior to SMR Jul-2025 Release 1 allows local attackers to power off the device...
CVE-2025-21001
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast...
CVE-2025-21002
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to manipulate broadcasting Auracast...
CVE-2025-21003
Insecure storage of sensitive information in Emergency SOS prior to SMR Jul-2025 Release 1 allows local attackers to access sensitive information...
CVE-2025-21001
Improper access control in LeAudioService prior to SMR Jul-2025 Release 1 allows local attackers to stop broadcasting Auracast...
CVE-2025-21000
This CVE affects Samsung Mobile devices where Bluetooth improper privilege management prior to SMR Jul-2025 Release 1 allows local attackers to enable Bluetooth. Core issue is privilege management in the Bluetooth stack; impact is local access/enablement of Bluetooth with no remote code execution...
CVE-2025-20997
CVE-2025-20997 affects Samsung Galaxy Watch Framework prior to SMR Jul-2025 Release 1. The issue is an incorrect default permission setting in the Framework, enabling a local attacker to reset certain Galaxy Watch configurations. Root cause: permissive defaults in the Framework component. Impact ...