24863 matches found
CVE-2025-4828: Improper Limitation of a Pathname to a Restricted Directory
The Support Board plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the sbfiledelete function in all versions up to, and including, 3.8.0. This makes it possible for attackers to delete arbitrary files on the server, which can easily lead to...
CVE-2025-4855 Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key
The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default secrets in the sbencryption function in all versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to bypass authorization...
CVE-2025-4828 Support Board <= 3.8.0 - Unauthenticated Arbitrary File Deletion
The Support Board plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the sbfiledelete function in all versions up to, and including, 3.8.0. This makes it possible for attackers to delete arbitrary files on the server, which can easily lead to...
CVE-2025-4855 Support Board <= 3.8.0 - Unauthenticated Authorization Bypass due to Use of Default Secret Key
The Support Board plugin for WordPress is vulnerable to unauthorized access/modification/deletion of data due to use of hardcoded default secrets in the sbencryption function in all versions up to, and including, 3.8.0. This makes it possible for unauthenticated attackers to bypass authorization...
Lenovo Vantage Privilege Escalation - Lenovo Support US
No description provided...
Qualcomm WLAN Software Vulnerability - Lenovo Support US
No description provided...
Multi-Vendor BIOS Security Vulnerabilities (July 2025) - Lenovo Support US
No description provided...
MediaTek WLAN Vulnerabilities - Lenovo Support US
No description provided...
MediaTek 2025-07 Bluetooth Vulnerabilities - Lenovo Support US
No description provided...
MediaTek WLAN Vulnerability - Lenovo Support US
No description provided...
USN-7594-3 linux-aws, linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - RISC-V architecture; - User-Mode Linux UML; - x...
Software Fix (Rescue and Smart Assistant) DLL Hijack Vulnerability - Lenovo Support US
No description provided...
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019 HP Support Assistant – Potential Escalation of Privilege
A potential security vulnerability has been identified in the HP Support Assistant, which allows a local attacker to escalate privileges via an arbitrary file deletion...
CVE-2025-43019
HP Support Assistant is affected by CVE-2025-43019, a local privilege-escalation vulnerability arising from arbitrary file deletion. Connected sources confirm the issue and relate it to the HP Support Assistant product lines, with HP’s advisory HPSBGN04031 noting affected versions and a minimum m...
CVE-2025-7326
CVE-2025-7326 is an elevation-of-privilege weakness described in IBM’s security bulletin as affecting IBM Robotic Process Automation products running on ASP.NET Core (the vulnerable ASP.NET Core component used by IBM RPA). The IBM page confirms weak authentication in EOL ASP.NET Core can let an u...
