CVE-2026-10629

SIP signaling stack in Verizon IMS unspecified version implements SIP signaling without IPsec integrity protection missing Security-Client/Security-Server headers and ESP traffic, which allows an on-path attacker to compromise confidentiality, integrity, and authenticity of VoLTE signaling via...

CVE-2026-3047 Org.keycloak.broker.saml: keycloak saml broker: authentication bypass due to disabled saml client completing idp-initiated login

A flaw was found in org.keycloak.broker.saml. When a disabled Security Assertion Markup Language SAML client is configured as an Identity Provider IdP-initiated broker landing target, it can still complete the login process and establish a Single Sign-On SSO session. This allows a remote attacker...

EUVD-2025-1751

Malicious code in bioql PyPI...

CVE-2019-8458

Check Point Endpoint Security Client for Windows, with Anti-Malware blade installed, before version E81.00, tries to load a non-existent DLL during an update initiated by the UI. An attacker with administrator privileges can leverage this to gain code execution within a Check Point Software...

io.quarkiverse.cxf:quarkus-cxf-integration-test-client (>=1.5.8, <=1.5.10), io.quarkiverse.cxf:quarkus-cxf-integration-test-logging (>=1.5.8, <=1.5.10) +325 more potentially affected by CVE-2025-1634 via io.quarkus:quarkus-resteasy (2.13.5.final)

io.quarkus:quarkus-resteasy MAVEN version 2.13.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-resteasy and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-integration-test-client =1.5.8, =1.5.8, =1.5.8, =1.5.8, =1.5.8,...

CVE-2025-0543

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

CVE-2025-0543

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

CVE-2025-0543 G DATA Security Client Local privilege escalation

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

CVE-2025-0543

CVE-2025-0543 describes a local privilege escalation in the G DATA Security Client caused by incorrect assignment of directory privileges. An unprivileged local attacker can escalate to SYSTEM by placing an arbitrary executable in a globally writable directory, which is then executed by the Setup...

CVE-2025-0543 G DATA Security Client Local privilege escalation

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

CVE-2025-0543: Incorrect Default Permissions

Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executable in a globally writable directory resulting in...

G DATA Security Client security vulnerability

G DATA Security Client is an antivirus software security client from G DATA. A security vulnerability exists in G DATA Security Client that stems from an incorrect assignment of directory permissions, resulting in local elevation of privileges...

Amazon Linux 2023 : postgresql16, postgresql16-contrib, postgresql16-llvmjit (ALAS2023-2024-786)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-786 advisory. Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended. CVE-2023-2455 and CVE-2016-2193 fixed most interaction...

io.quarkiverse.cxf:quarkus-cxf-deployment (1.5.2), io.quarkiverse.cxf:quarkus-cxf-integration-test-client (1.5.2) +8 more potentially affected by CVE-2024-9621 via io.quarkiverse.cxf:quarkus-cxf (1.5.2)

io.quarkiverse.cxf:quarkus-cxf MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkiverse.cxf:quarkus-cxf and may be impacted: - io.quarkiverse.cxf:quarkus-cxf-deployment 1.5.2 -...

com.canoo.dolphin-platform:dolphin-platform-security-client (>=1.0.0.cr4, <=1.0.0.cr5), com.canoo.dolphin-platform:dolphin-platform-security-server (>=1.0.0.cr4, <=1.0.0.cr5) +88 more potentially affected by CVE-2023-6841 via org.keycloak:keycloak-core (3.4.3.final)

org.keycloak:keycloak-core MAVEN version 3.4.3.final is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-core and may be impacted: - com.canoo.dolphin-platform:dolphin-platform-security-client =1.0.0.cr4, =1.0.0.cr4, =1.0.0.cr4,...

CVE-2024-24912 Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file

A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system...

CVE-2024-24912

A local privilege escalation vulnerability exists in Harmony Endpoint Security Client for Windows versions E88.10 and below . The root cause involves an incorrect permission assignment where an attacker can manipulate a COM object to load a specially crafted DLL file . To exploit this, the attack...

CVE-2024-24912 Local privilege escalation in Harmony Endpoint Security Client for Windows via crafted DLL file

A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system...

CVE-2024-24912: Incorrect Permission Assignment for Critical Resource

A local privilege escalation vulnerability has been identified in Harmony Endpoint Security Client for Windows versions E88.10 and below. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target system...

Improper Privilege Management in github.com/sap/cloud-security-client-go

Impact SAP BTP Security Services Integration Library Golang github.com/sap/cloud-security-client-go allows under certain conditions an escalation of privileges. On successful exploitation, an unauthenticated attacker can obtain arbitrary permissions within the application. Patches Upgrade to...