7322 matches found
CVE-2025-20982
Out-of-bounds write in setting auth secret in KnoxVault trustlet prior to SMR Jul-2025 Release 1 allows local privileged attackers to write out-of-bounds memory...
PT-2025-28374 · Samsung · Knoxvault Trustlet
Name of the Vulnerable Software and Affected Versions: KnoxVault trustlet versions prior to SMR Jul-2025 Release 1 Description: The issue is related to an out-of-bounds write in setting auth secret, which allows local privileged attackers to write out-of-bounds memory. This can be exploited by...
PT-2025-28382 · Unknown · Emergency Sos
Name of the Vulnerable Software and Affected Versions: Emergency SOS versions prior to SMR Jul-2025 Release 1 Description: The issue concerns insecure storage of sensitive information in Emergency SOS, allowing local attackers to access sensitive information. Recommendations: For versions prior t...
SAMSUNG Mobile devices 安全漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices versions prior to SMR Jul-2025 Release 1, which stems from improperly set default permission...
USN-7604-1: Sudo vulnerabilities
Rich Mirch discovered that Sudo incorrectly handled the host option. In environments where per-host rules are configured in the sudoers file, a local attacker could use this issue to bypass the host restrictions. CVE-2025-32462 Rich Mirch discovered that Sudo incorrectly handled the chroot option...
CVE-2025-6217
PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...
yaml-libyaml: LibYAML Perl File Modification Vulnerability
A flaw was found in yaml-libyaml. The component uses a two-argument open function when parsing YAML files, which allows an attacker to modify existing files on the system. This flaw allows a local attacker to provide a crafted YAML file as input. This issue can result in unauthorized modification...
CVE-2025-6217
PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...
CVE-2025-6217
CVE-2025-6217 concerns PEAK-System Driver (PCANFD) with a flaw in the PCANFD_ADD_FILTERS IOCTL. The issue arises from a lack of proper locking when performing operations on an object, enabling Time-Of-Check Time-Of-Use information disclosure. Descriptions state that an attacker who can run low-pr...
CVE-2025-6217 PEAK-System Driver PCANFD_ADD_FILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability
PEAK-System Driver PCANFDADDFILTERS Time-Of-Check Time-Of-Use Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of PEAK-System Driver. An attacker must first obtain the ability to execute low-privileged code...
CVE-2025-30642
A link following vulnerability in Trend Micro Deep Security 20.0 agents could allow a local attacker to create a denial of service DoS situation on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploi...
TencentOS Server 3: librabbitmq (TSSA-2023:0298)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0298 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
Vulnerabilities fixed in Ivanti Workspace Control
Ivanti has fixed vulnerabilities in Ivanti Workspace Control Specifically for versions prior to 10.19.10.0. The vulnerabilities are in the hard-coded keys within Ivanti Workspace Control, specifically in versions prior to 10.19.10.0. These vulnerabilities allow local, authenticated attackers to...
PT-2025-25262 · Pioneers · Dmh-Wt7600Nex +1
Name of the Vulnerable Software and Affected Versions: Pioneer DMH-WT7600NEX affected versions not specified Description: This issue allows local attackers to bypass authentication on affected installations of Pioneer DMH-WT7600NEX devices. The flaw exists within the configuration of the...
CVE-2025-20063
in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion...
CVE-2025-20992
Out-of-bound read in libsecimaging.camera.samsung.so prior to SMR Feb-2025 Release 1 allows local attackers to read out-of-bounds memory...
CVE-2025-20986
Improper access control in ScreenCapture for Galaxy Watch prior to SMR Jun-2025 Release 1 allows local attackers to take screenshots...
CVE-2025-20994
Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files...