https://vulnogram.org/ Most recent CVEs assigned by cirosec GmbH (cirosec). https://vulnogram.org/seaview/icons/cirosec.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-8374 https://vulnogram.org/CVE-2026-8374 Misuse and misconfiguration in Bluetooth communication in SwitchBot Door Lock Series allows an attacker to bypass the electronic lock and access controls via a manipulated communication protocol. High Fri, 09 Oct 2026 12:09:07 GMT https://vulnogram.org/CVE-2025-41459 https://vulnogram.org/CVE-2025-41459 Insufficient protection against brute-force and runtime manipulation in the local authentication component in Two App Studio Journey 5.5.6 on iOS allows local attackers to bypass biometric and PIN-based access control via repeated PIN attempts or dyn… High Mon, 21 Jul 2025 11:01:29 GMT https://vulnogram.org/CVE-2025-41458 https://vulnogram.org/CVE-2025-41458 Unencrypted storage in the database in Two App Studio Journey v5.5.9 for iOS allows local attackers to extract sensitive data via direct access to the app’s filesystem. Medium Mon, 21 Jul 2025 11:01:13 GMT https://vulnogram.org/CVE-2025-2306 https://vulnogram.org/CVE-2025-2306 An Improper Access Control vulnerability was identified in the file download functionality. This vulnerability allows users to download sensitive documents without authentication, if the URL is known. The attack requires the attacker to know the docu… Medium Network Exploitable Fri, 16 May 2025 12:10:13 GMT https://vulnogram.org/CVE-2025-2305 https://vulnogram.org/CVE-2025-2305 A Path traversal vulnerability in the file download functionality was identified. This vulnerability allows unauthenticated users to download arbitrary files, in the context of the application server, from the Linux server. High Network Exploitable Fri, 16 May 2025 12:09:41 GMT https://vulnogram.org/CVE-2025-1865 https://vulnogram.org/CVE-2025-1865 The kernel driver, accessible to low-privileged users, exposes a function that fails to properly validate the privileges of the calling process. This allows creating files at arbitrary locations with full user control, ultimately allowing for privile… High Fri, 04 Apr 2025 09:52:56 GMT https://vulnogram.org/CVE-2025-0714 https://vulnogram.org/CVE-2025-0714 The vulnerability exists in the password storage of Mobateks MobaXterm in versions below 25.0. MobaXTerm uses an initialisation vector (IV) consisting only of zero bytes and a master key to encrypt each password individually. In the default configura… Medium Mon, 17 Feb 2025 11:56:45 GMT https://vulnogram.org/CVE-2025-0543 https://vulnogram.org/CVE-2025-0543 Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by placing an arbitrary executabl… High Sat, 25 Jan 2025 16:17:46 GMT https://vulnogram.org/CVE-2025-0542 https://vulnogram.org/CVE-2025-0542 Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability allows a local, unprivileged attacker to escalate privileges on affected installations by… High Sat, 25 Jan 2025 16:15:09 GMT https://vulnogram.org/CVE-2023-7273 https://vulnogram.org/CVE-2023-7273 Cross site request forgery in Kiteworks OwnCloud allows an unauthenticated attacker to forge requests. If a request has no Authorization header, it is created with an empty string as value by a rewrite rule. The CSRF check is done by comparing the he… Medium Network Exploitable Tue, 01 Oct 2024 12:34:10 GMT https://vulnogram.org/CVE-2024-6510 https://vulnogram.org/CVE-2024-6510 Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking. High Thu, 12 Sep 2024 14:18:32 GMT https://vulnogram.org/CVE-2024-7834 https://vulnogram.org/CVE-2024-7834 A local privilege escalation is caused by Overwolf loading and executing certain dynamic link library files from a user-writeable folder in SYSTEM context on launch. This allows an attacker with unprivileged access to the system to run arbitrary code… High Wed, 04 Sep 2024 12:35:27 GMT https://vulnogram.org/CVE-2024-6689 https://vulnogram.org/CVE-2024-6689 Local Privilege Escalation in MSI-Installer in baramundi Management Agent v23.1.172.0 on Windows allows a local unprivileged user to escalate privileges to SYSTEM. High Mon, 15 Jul 2024 13:18:09 GMT