CVE-2024-32666: NULL Pointer Dereference

NULL pointer dereference in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-43626: Improper Access Control

Improper access control in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-34543: Improper Access Control

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-43753: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper conditions check in some IntelR Processors with IntelR SGX may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-33848: Uncaught Exception

Uncaught exception in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-32940: Improper Access Control

Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-21781: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to enable information disclosure or denial of service via local access...

CVE-2023-25546: Out-of-bounds Read

Out-of-bounds read in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-36247: Improper Access Control

Improper access control in IntelR RAID Web Console all versions may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2024-23599: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Seamless Firmware Updates for some IntelR reference platforms may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-21871: Improper Input Validation

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-42772: Untrusted Pointer Dereference

Untrusted pointer dereference in UEFI firmware for some IntelR reference processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24968: Improper Finite State Machines (FSMs) in Hardware Logic

Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...

CVE-2024-23984: Observable Discrepancy

Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

PT-2024-7302

Name of the Vulnerable Software and Affected Versions: IntelR Processors with IntelR SGX affected versions not specified Description: The issue is related to an improper conditions check in the implementation of Intel's Software Guard eXtensions SGX technology. This could allow a privileged user ...

Malicious code in flag-leak-r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 88c1df06a02daf1a911f895df0bd495b0f0d2e72f3b9ad45fe5a837575379c9e Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2024-9446 Malicious code in flag-leak-r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 88c1df06a02daf1a911f895df0bd495b0f0d2e72f3b9ad45fe5a837575379c9e Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

CVE-2024-44992

In the Linux kernel, the following vulnerability has been resolved: smb/client: avoid possible NULL dereference in cifsfreesubrequest Clang static checker scan-build warning: cifsglob.h:line 890, column 3 Access to field 'ops' results in a dereference of a null pointer. Commit 519be989717c "cifs:...

CVE-2024-44992

The CVE-2024-44992 issue affects the Linux kernel SMB/CIFS client code, specifically a possible NULL dereference in cifs_free_subrequest() when handling rdata->server. The root cause is code that could dereference rdata->server->ops->add_credits() if rdata->credits.value != 0 and r...

CVE-2024-5623

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...