EUVD-2022-41584

Malicious code in bioql PyPI...

CVE-2025-34193 Vasion Print (formerly PrinterLogic) Insecure Windows Components Lack Modern Memory Protections and Use Outdated Runtimes

Vasion Print formerly PrinterLogic Virtual Appliance Host versions prior to 25.1.102 and Application versions prior to 25.1.1413 include Windows client components PrinterInstallerClientInterface.exe, PrinterInstallerClient.exe, PrinterInstallerClientLauncher.exe that lack modern compile-time and...

CVE-2019-17449

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges...

CVE-2025-0505

On Arista CloudVision systems virtual or physical on-premise deployments, Zero Touch Provisioning can be used to gain admin privileges on the CloudVision system, with more permissions than necessary, which can be used to query or manipulate system state for devices under management. Note that...

CVE-2024-43442

Improper Neutralization of Input done by an attacker with admin privileges 'Cross-site Scripting' in OTRS System Configuration modules and OTRS Community Edition allows Cross-Site Scripting XSS within the System Configuration targeting other admins. This issue affects: OTRS from 7.0.X through...

PT-2020-4644 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: A vulnerability in the system file transfer functions could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system. The...

PT-2018-3898 · Oracle +1 · Mysql Server

Name of the Vulnerable Software and Affected Versions: Oracle MySQL Server versions 8.0.11 and prior Description: The issue is related to insufficient access control in the privileges system of Oracle MySQL Server, allowing a remote attacker to cause a denial of service using the MySQL protocol...

USN-2237-1: Linux kernel (Quantal HWE) vulnerability

Pinkie Pie discovered a flaw in the Linux kernel's futex subsystem. An unprivileged local user could exploit this flaw to cause a denial of service system crash or gain administrative privileges...

ESET Smart Security easdrv.sys Local Privilege Escalation Vulnerability

The host is running ESET Smart Security, which is prone to a local privilege escalation vulnerability. OpenVAS Vulnerability Test $Id: secpodesetsmartseclocalprvescvuln900114.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: ESET Smart Security easdrv.sys Local Privilege Escalation Vulnerability...

CVE-2004-1375

Unknown vulnerability in System Administration Manager SAM in HP-UX B.11.00, B.11.11, B.11.22, and B.11.23 allows local users to gain privileges...

Upclient 5.0 b7 - Command Line Argument Buffer Overflow

// source: https://www.securityfocus.com/bid/7703/info upclient has been reported prone to a buffer overflow vulnerability when handling command line arguments of excessive length. It is possible for a local attacker to seize control of the vulnerable application and have malicious arbitrary code...