2342 matches found
PT-2025-27396 · Honor · Honor Pc Manager
Name of the Vulnerable Software and Affected Versions: Honor PC Manager version 16.0.0.118 Description: A privilege escalation issue was discovered in Honor PC Manager, where several services connect to the named pipe iMateBookAssistant with default or overly permissive security attributes...
The vulnerability of the SLNX PC Client of the embedded application and document management tool RICOH Streamline NX allows a perpetrator to elevate their privileges and execute arbitrary code.
The vulnerability of the SLNX PC Client of the embedded application and document management tool RICOH Streamline NX lies in the use of an unreliable data source during the download of updates. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary cod...
USN-7574-1 golang-1.22 vulnerabilities
Kyle Seely discovered that the Go net/http module did not properly handle sensitive headers during repeated redirects. An attacker could possibly use this issue to obtain sensitive information. CVE-2024-45336 Juho Forsén discovered that the Go crypto/x509 module incorrectly handled IPv6 addresses...
CVE-2025-46783
Path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 to 3.242.0. If this vulnerability is exploited, arbitrary code may be executed on the PC where the product is running by tampering with specific files used on the product...
CVE-2025-36506
CVE-2025-36506 affects Ricoh Streamline NX V3 PC Client, versions 3.5.0 to 3.242.0. The issue is an external control of file name or path (CWE-73) that allows a crafted request to overwrite arbitrary files in the filesystem with log data. Exploitation details are not provided beyond the vulnerabi...
RICOH Streamline NX V3 PC Client 路径遍历漏洞
RICOH Streamline NX V3 PC Client is a complete solution for large-scale, integrated management of devices from Ricoh RICOH Japan. A path traversal vulnerability exists in RICOH Streamline NX V3 PC Client versions 3.5.0 through 3.242.0, which originates from a path traversal and could lead to the...
Realtek Wireless Bluetooth Security Update
A potential security vulnerability has been identified in certain Realtek Wireless Bluetooth drivers for HP PC products which might allow information disclosure. Realtek has provided an updated RTL8xxx Series Bluetooth Driver to mitigate this vulnerability. Realtek has released updates to mitigat...
CVE-2025-26383
The iSTAR Configuration Utility ICU tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on...
CVE-2025-26383
The iSTAR Configuration Utility ICU tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on...
CVE-2025-26383
CVE-2025-26383 relates to Johnson Controls’ iSTAR Configuration Utility (ICU). A memory leak in ICU could cause exposure of unauthorized data from the Windows PC hosting ICU. Public details identify affected software as ICU and indicate the issue resides before ICU version 6.9.5. Remediation exis...
CVE-2025-26383
The iSTAR Configuration Utility ICU tool leaks memory, which could result in the unintended exposure of unauthorized data from the Windows PC that ICU is running on...
CVE-2025-46355
Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker...
CVE-2025-46355
Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker...
CVE-2025-46355
Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker...
CVE-2025-46355
Incorrect default permissions issue in PC Time Tracer prior to 5.2. If exploited, arbitrary code may be executed with SYSTEM privilege on Windows system where the product is running by a local authenticated attacker...
Improper file access permission settings in PC Time Tracer
Overview PC Time Tracer provided by Keiyo System Co., LTD contains a vulnerability listed below. Incorrect default permissions CWE-276 - CVE-2025-46355 Ruslan Sayfiev and Masahiro Kawada of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...
PT-2025-23593 · Unknown · Pc Time Tracer
Name of the Vulnerable Software and Affected Versions: PC Time Tracer versions prior to 5.2 Description: The issue is related to incorrect default permissions in PC Time Tracer. If exploited, a local authenticated attacker could execute arbitrary code with SYSTEM privilege on Windows systems wher...
JVN#05562338: Improper file access permission settings in PC Time Tracer
PC Time Tracer provided by Keiyo System Co., LTD contains a vulnerability listed below. Incorrect default permissions CWE-276 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Base Score 7.3 CVE-2025-46355 Impact Arbitrary...
