6598 matches found
CVE-2025-47995: Weak Authentication
Weak authentication in Azure Machine Learning allows an authorized attacker to elevate privileges over a network...
Microsoft Azure Machine Learning 安全漏洞
Microsoft Azure Machine Learning is a machine learning services platform from Microsoft USA. Microsoft Azure Machine Learning has a security vulnerability that can be exploited by an attacker to potentially cause elevation of privilege...
CVE-2025-20274: Unrestricted Upload of File with Dangerous Type
A vulnerability in the web-based management interface of Cisco Unified Intelligence Center could allow an authenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to improper validation of files that are uploaded to the web-based management...
One Identity Password Manager 安全漏洞
One Identity Password Manager is a web platform for providing authentication from One Identity, Inc. in the United States. A security vulnerability exists in One Identity Password Manager versions prior to 5.14.4, which stems from a flaw in the security hardening mechanism in the Secure Password...
Shenzhen Liandian Communication Technology V380 IP Camera 安全漏洞
Shenzhen Liandian Communication Technology V380 IP Camera is a camera from Shenzhen Liandian Communication Technology. A security vulnerability exists in the Shenzhen Liandian Communication Technology V380 IP Camera AppFHE1V1.0.6.0 version, which stems from the default enablement of Telnet servic...
CVE-2025-47991
Use after free in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...
CVE-2025-49685
Use after free in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally...
CVE-2025-48819
Sensitive data storage in improperly locked memory in Windows Universal Plug and Play UPnP Device Host allows an authorized attacker to elevate privileges over an adjacent network...
Microsoft Office 365 (2016 Click-to-Run) RCE Vulnerability (Jul 2025)
This host is missing a critical security update according to Microsoft Office Click-to-Run update July 2025. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2025-49725
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49726
Use after free in Windows Notification allows an authorized attacker to elevate privileges locally...
CVE-2025-49689
Integer overflow or wraparound in Virtual Hard Disk VHDX allows an unauthorized attacker to elevate privileges locally...
CVE-2025-49678
Null pointer dereference in Windows NTFS allows an authorized attacker to elevate privileges locally...
CVE-2025-49675
Use after free in Kernel Streaming WOW Thunk Service Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-49659
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
CVE-2025-49660
Use after free in Windows Event Tracing allows an authorized attacker to elevate privileges locally...
CVE-2025-49659
Buffer over-read in Windows TDX.sys allows an authorized attacker to elevate privileges locally...
CVE-2025-47996
Integer underflow wrap or wraparound in Windows MBT Transport driver allows an authorized attacker to elevate privileges locally...