17509 matches found
An incorrect TLB flush issue was found in the Linux kernel’s GPU i915 kernel driver, potentially leading to random memory corruption or data leaks. This flaw could allow a local user to crash the system or escalate their privileges on the system.
...
A use-after-free flaw was found in the Linux kernel’s PLP Rose functionality in the way a user triggers a race condition by calling bind while simultaneously triggering the rose_bind() function. This flaw allows a local user to crash or potentially escalate their privileges on the system.
...
man-db before 2.8.5 on Gentoo allows local users (with access to the man user account) to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. (Also, the owner can strip the setuid and setgid bits.)
...
ypserv allows a local user to modify the GECOS and login shells of other users.
...
PT-2025-40402
Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments affected versions not specified Description The software stores a significant number of sensitive credentials, including database passwords, MySQL ro...
A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail.
...
CVE-2025-23297
NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access could modify files in the Frameview SDK directory. A successful exploit of this vulnerability might lead to escalation of privileges...
CVE-2023-50300
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...
CVE-2023-50300
IBM Transformation Extender Advanced 10.0.1 is affected by an Improper Access Control vulnerability that could allow a local user to perform unauthorized actions. The issue is documented across multiple sources (CVE-2023-50300) with affected product: Transformation Extender Advanced (IBM) 10.0.1....
CVE-2023-50300 IBM Transformation Extender Advanced improper access control
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...
CVE-2023-50300 IBM Transformation Extender Advanced improper access control
IBM Transformation Extender Advanced 10.0.1 could allow a local user to perform unauthorized actions due to improper access controls...
CVE-2023-50301
IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user...
CVE-2023-50301 IBM Transformation Extender Advanced information disclosure
IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user...
CVE-2023-50301
IBM Transformation Extender Advanced 10.0.1 stores potentially sensitive information in log files that could be read by a local user, exposing data via log disclosure. The vulnerability is rooted in log file handling of sensitive information. IBM lists affected version 10.0.1 and provides remedia...
PT-2025-40277
Name of the Vulnerable Software and Affected Versions IBM Transformation Extender Advanced version 10.0.1 Description The software contains improper access controls, potentially allowing a local user to perform unauthorized actions. Recommendations At the moment, there is no information about a...
NewStart CGSL MAIN 6.06 : fuse Multiple Vulnerabilities (NS-SA-2025-0207)
The remote NewStart CGSL host, running version MAIN 6.06, has fuse packages installed that are affected by multiple vulnerabilities: - fusermount in FUSE before 2.4.1, if installed setuid root, allows local users to corrupt /etc/mtab and possibly modify mount options by performing a mount over a...
NewStart CGSL MAIN 6.06 : util-linux Vulnerability (NS-SA-2025-0207)
The remote NewStart CGSL host, running version MAIN 6.06, has util-linux packages installed that are affected by a vulnerability: - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. CVE-2014-9114 Note that Nessus has not tested for these issues but has instead reli...
CVE-2025-36144
IBM Lakehouse watsonx.data 2.2 stores potentially sensitive information in log files that could be read by a local user...