CVE-2025-21100

Improper initialization in the UEFI firmware for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20032

Improper input validation for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access...

CVE-2025-20032

CVE-2025-20032 affects Intel® PROSet/Wireless WiFi Software for Windows prior to version 23.100. The vulnerability stems from improper input validation, which may allow a privileged user with local access to cause a denial of service. Affected products listed in connected materials include Intel®...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20022

Insufficient control flow management for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access...

CVE-2025-20009

Improper input validation in the UEFI firmware GenerationSetup module for the IntelR Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access...

CVE-2025-20009

The Intel advisory INTEL-SA-01269 documents CVE-2025-20009 (and related CVEs) affecting Intel Server Board D50DNP and M50FCP. It describes improper input validation in the UEFI firmware GenerationSetup module that could allow a privileged user to disclose information via local access. A remediati...

microcode_ctl: Improper input validation in UEFI firmware

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

kernel: octeontx2-af: Add validation before accessing cgx and lmac

A bounds-checking error was found in the Linux kernel Marvell OcteonTX2 network driver's initialization code. On systems with newer CN10K RPM or CN10KB RPMUSX hardware, a local user with privileges to initialize the driver can trigger driver probe, causing the driver to make incorrect assumptions...

CVE-2025-35471 conda-forge openssl-feedstock writable OPENSSLDIR

conda-forge openssl-feedstock before 066e83c 2024-05-20, on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary co...

CVE-2025-42997

CVE-2025-42997 affects SAP Gateway Client. Description: information disclosure vulnerability where a high-privileged user can access restricted data beyond the application’s scope, caused by improper privilege management and data exposure that may yield low impact to confidentiality, integrity, a...

CVE-2025-42997 Information Disclosure vulnerability in SAP Gateway Client

Under certain conditions, SAP Gateway Client allows a high-privileged user to access restricted information beyond the scope of the application. Due to the possibility of influencing application behavior or performance through misuse of the exposed data, this may potentially lead to low impact on...

PT-2025-21108 · Intel · Intel Server M50Fcp +1

Name of the Vulnerable Software and Affected Versions: IntelR Server D50DNP and M50FCP boards affected versions not specified Description: The issue is related to improper initialization in the UEFI firmware, which may allow a privileged user to potentially enable information disclosure via local...

firefox: thunderbird: Privilege escalation in Firefox Updater

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Mozilla Firefox's update mechanism allowed a medium-integrity user process to interfere with the SYSTEM-level updater by manipulating the file-locking behavior. By injecting code into the...

Schweitzer Engineering Laboratories多款产品 安全漏洞

Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software and more are products of Schweitzer Engineering Laboratories, Inc. of the U.S.A. Schweitzer Engineering Laboratories SEL-5033 acSELerator RTAC Software is a graphical, easy-to-use tool that helps users quickly and easily...

CVE-2025-26168

IXON VPN Client before 1.4.4 on Linux and macOS allows Local Privilege Escalation to root because there is code execution from a configuration file that can be controlled by a low-privileged user. There is a race condition in which a temporary configuration file, in a world-writable directory, ca...

389-ds-base: null pointer dereference leads to denial of service

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it...

CVE-2025-46571 Open WebUI vulnerable to limited stored XSS vila uploaded html file

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to version 0.6.6, low privileged users can upload HTML files which contain JavaScript code via the /api/v1/files/ backend endpoint. This endpoint returns a file id, which can be used to open t...

CVE-2025-43595

An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a low privileged user to execute commands with root privileges in the 'Online Backup' folder. Upgrade to MSP360 Backup 4.4 released on 2025-04-22...

CVE-2025-0427

Use After Free vulnerability in Arm Ltd Bifrost GPU Kernel Driver, Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to perform valid GPU processing operations to gain access to already freed memory.This issue affects...