6599 matches found
CVE-2025-46416: Improper Ownership Management
The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account e.g., nixbld or guixbuild. This affects Nix through 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix through 2.91.2, 2.92.2, and 2.93.1; and Guix before...
HPESBGN04876 rev.2 - HPE OneView for VMware vCenter (OV4VC) and Compute Ops Management plug-in for VMware vCenter (COM4VC), Local Elevation of of Privilege
Potential Security Impact: Local: Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE OneView for VMware vCenter with Operations Manager and Log Insight - All versions prior to v11.7 HPE Compute Ops Management - All versions prior to v1.4 CVSS Scores: | CVE ...
CVE-2023-50450
An issue was discovered in Sensopart VISOR Vision Sensors before 2.10.0.2 allows local users to perform unspecified actions with elevated privileges...
Dell PowerScale OneFS 安全漏洞
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 due to a lack of authorization in NFS exports. An attack...
Storaged libblockdev 安全漏洞
Storaged libblockdev is a Storaged open source library for manipulating block devices. A security vulnerability exists in Storaged libblockdev that stems from interacting with the udisks daemon in an improper manner, which could lead to local elevation of privilege...
Trend Micro Apex One 代码问题漏洞
Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from an uncontrolled search path that could lead to local elevation of privilege...
Trend Micro Security 安全漏洞
Trend Micro Security is an antivirus software from Trend Micro. A security vulnerability exists in Trend Micro Security version 17.8, which stems from improper link following and could lead to local elevation of privilege...
CVE-2025-6020: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in linux-pam. The module pamnamespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions...
TencentOS Server 3: xorg-x11-server (TSSA-2023:0102)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2023:0102 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...
TencentOS Server 3: tigervnc (TSSA-2023:0151)
The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0151 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...
CVE-2025-27689
Dell iDRAC Tools, versions prior to 11.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2025-33070
Use of uninitialized resource in Windows Netlogon allows an unauthorized attacker to elevate privileges over a network...
CVE-2025-47955
Improper privilege management in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2025-32721
Improper link resolution before file access 'link following' in Windows Recovery Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32721
Improper link resolution before file access 'link following' in Windows Recovery Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32716
Out-of-bounds read in Windows Media allows an authorized attacker to elevate privileges locally...
CVE-2025-32714
Improper access control in Windows Installer allows an authorized attacker to elevate privileges locally...
CVE-2025-32713
Heap-based buffer overflow in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...
CVE-2025-32713
CVE-2025-32713 corresponds to a heap-based buffer overflow in Windows Common Log File System Driver that enables local privilege escalation for an authorized attacker. The connected sources identify the affected component as the Windows Common Log File System Driver and list the impact as obtaini...
