25 matches found
CVE-2026-0050
In handleBondStateChanged of AdapterService.java, there is a possible sensitive information disclosure due to a permissions bypass. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2025-54511
Improper handling of insufficient privileges in the AMD Secure Processor ASP could allow an attacker to provide an input value to a function without sufficient privileges and successfully write data, potentially resulting in loss of integrity of availability...
CVE-2026-43360
A flaw was found in the Linux kernel's Btrfs file system. A malicious user can exploit this vulnerability by creating multiple files with names that result in the same hash. This action can trigger a transaction abort, causing the file system to switch into a read-only mode. This ultimately leads...
CVE-2025-71254
Technical details are not publicly available in the provided documents. Monitor for updates.
EUVD-2019-18846
Malware in sbrugna...
EUVD-2019-11698
Malware in sbrugna...
CVE-2025-40594
A vulnerability has been identified in SINAMICS G220 V6.4 All versions V6.4 HF2, SINAMICS S200 V6.4 All versions V6.4 HF7, SINAMICS S210 V6.4 All versions V6.4 HF2. The affected devices allow a factory reset to be executed without the required privileges due to improper privilege management as we...
Linux Distros Unpatched Vulnerability : CVE-2022-2318
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There are use-after-free vulnerabilities caused by timer handler in net/rose/rosetimer.c of linux that allow attackers to crash linux kernel without any...
PT-2025-23008 · Google · Android
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a possible disclosure of Bluetooth adapter details due to a permissions bypass, which could lead to local information disclosure without requiring additional execution...
CVE-2023-21253
In multiple locations, there is a possible way to crash multiple system services due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation...
CVE-2021-20760
Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege...
Apple macOS 安全漏洞
Apple macOS is a suite of specialized operating systems from the U.S.-based Apple Inc. developed specifically for Mac computers. A security vulnerability exists in Apple macOS, which stems from a checking improvement that could lead to a malicious application modifying other applications without...
UNISOC Chipsets Security Vulnerability
UNISOC Chipsets is a chipset from China's Unisolar Corporation UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from incorrect input validation in the video decoder. This could result in a local denial of service without requiring additional execute privileges...
PT-2023-18141 · Scudo · Scudo
Name of the Vulnerable Software and Affected Versions: Scudo affected versions not specified Description: The issue is related to an insecure implementation or design in Scudo, allowing an attacker to predict heap allocation patterns. This could lead to local information disclosure without...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by an attacker to cause local information to be disclosed without additional execute privileges...
PT-2022-24717 · Unknown · Power Management Service
Name of the Vulnerable Software and Affected Versions: Power management service affected versions not specified Description: The issue is related to a missing permission check in the power management service. This could allow setting up the power management service without needing additional...
UNISOC chipset 安全漏洞
The UNISOC chipset is an integrated circuit chipset from China's Unisolar Corporation UNISOC. The UNISOC chipset suffers from a security vulnerability that stems from a lack of privilege checking in its UscAIEngine service that allows an attacker to set up the UscAIEngine service without addition...
CVE-2022-38679
In music service, there is a missing permission check. This could lead to local denial of service in music service with no additional execution privileges needed...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in the Google Android Open Source Project AOSP, which stems from a vulnerability that allows an attacker to remotely execute code via Bluetooth without additional privileges. The followi...
Google Android 安全漏洞
Google Android is a Linux-based open source operating system from Google, Inc. Google Android is vulnerable to an information disclosure vulnerability that could be exploited by attackers to cause local information disclosure without additional execution privileges...