CVE-2025-49158

CVE-2025-49158 is an uncontrolled search path vulnerability in Trend Micro Apex One security agent that could allow a local attacker to escalate privileges, given the attacker already has the ability to run low-privileged code. Connected sources confirm affected product is Trend Micro Apex One (s...

CVE-2025-49158

An uncontrolled search path vulnerability in the Trend Micro Apex One security agent could allow a local attacker to escalation privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this...

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations...

CVE-2025-49155

An uncontrolled search path vulnerability in the Trend Micro Apex One Data Loss Prevention module could allow an attacker to inject malicious code leading to arbitrary code execution on affected installations...

Trend Micro Apex One 代码问题漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One that stems from an uncontrolled search path that could lead to local elevation of privilege...

Trend Micro Apex One Data Loss Prevention 代码问题漏洞

Trend Micro Apex One Data Loss Prevention is a data exfiltration prevention system from Trend Micro. A security vulnerability exists in Trend Micro Apex One Data Loss Prevention that stems from an uncontrolled search path that could lead to the execution of arbitrary code...

PT-2025-34322

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader affected versions not specified Description: The Foxit PDF Reader Update Service contains a local privilege escalation issue due to an uncontrolled search path element. This allows for potential exploitation by a local...

Trend Micro Worry-Free Business Security Services 代码问题漏洞

Trend Micro Worry-Free Business Security Services is an endpoint security solution from Trend Micro. A security vulnerability exists in Trend Micro Worry-Free Business Security Services that stems from an uncontrolled search path that could lead to the execution of arbitrary code...

Moderate: Red Hat Security Advisory: wireshark security update

An update for wireshark is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

ALSA-2025:9121 Moderate: wireshark security update

The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes: wireshark: Uncontrolled Recursion in Wireshark CVE-2025-1492 For more details about the security issues, including the impact, a CVSS score,...

RHEL 10 : wireshark (RHSA-2025:9121)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9121 advisory. The wireshark packages contain a network protocol analyzer used to capture and browse the traffic running on a computer network. Security Fixes:...

CVE-2025-4605

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

CVE-2025-4605

A maliciously crafted .usdc file, when loaded through Autodesk Maya, can force an uncontrolled memory allocation vulnerability. A malicious actor may leverage this vulnerability to cause a denial-of-service DoS, or cause data corruption...

PT-2025-25273 · Trend Micro · Trend Micro Worry-Free Business Security Services

Name of the Vulnerable Software and Affected Versions: Trend Micro Worry-Free Business Security Services WFBSS SaaS client version affected versions not specified Description: The issue is related to an uncontrolled search path vulnerability in the WFBSS agent, which could allow an attacker with...

Autodesk Maya 安全漏洞

Autodesk Maya is a three-dimensional computer graphics software from the American company Autodesk. It is widely used to create digital special effects for movies, television, commercials, computer games and video games. A security vulnerability exists in Autodesk Maya that originates from an...

CVE-2025-33068

Uncontrolled resource consumption in Windows Standards-Based Storage Management Service allows an unauthorized attacker to deny service over a network...

Microsoft Windows Standards-Based Storage Management Service 资源管理错误漏洞

Microsoft Windows Standards-Based Storage Management Service is a standards-based storage management service from Microsoft Corporation USA that provides the ability to discover, configure, and monitor storage resources. A resource management error vulnerability exists in Microsoft Windows...

Advisory ROSA-SA-2025-2878

Software: jose 10 OS: ROSA Virtualization 2.1 packageevrstring: jose-10-2.rv3.3 CVE-ID: CVE-2023-50967 BDU-ID: 2024-02461 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the C language module for signing and encrypting JSON latchset Jose objects is associated with uncontrolled resource consumption...

Red Hat Connectivity Link 资源管理错误漏洞

Red Hat Connectivity Link is a Kubernetes network connectivity management platform from Red Hat, USA. Red Hat Connectivity Link suffers from a Resource Management Error vulnerability that stems from uncontrolled resource consumption by an application, which can be exploited by an attacker to caus...

The vulnerability in the Jupyter Core environment for interactive code development and execution, related to an uncontrolled element in the search process, allows attackers to exploit their privileges.

The vulnerability in the Jupyter Core environment for interactive code development and execution is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...