CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...

CVE-2024-31154

Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access...

K000148582: Intel Server Board vulnerabilities CVE-2024-31154, CVE-2024-31158, CVE-2024-39609, CVE-2024-40885, and CVE-2024-41167

Security Advisory Description CVE-2024-31154 Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-31158 Improper input validation in UEFI firmware in some IntelR Server Boar...

CVE-2024-31154

CVE-2024-31154 affects Intel Server Board S2600BPBR UEFI firmware (and related S2600BP family). It stems from improper input validation in the UEFI, which could allow a privileged local attacker to escalate privileges. Intel’s advisory (Intel-SA-01175) confirms the broader family impact and recom...

Schweitzer Engineering Laboratories RTAC Cross-site Scripting (CVE-2023-31154)

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31154

creationtimestamp| type| source ---|---|--- 2023-05-11 00:14:56+00:00| seen| https://t.me/cibsecurity/63843...

CVE-2023-31154

CVE-2023-31154 affects Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface. The issue is an Improper Neutralization of Input During Web Page Generation (XSS) that could allow a remote authenticated attacker to inject and execute arbitrary script code. Refe...

CVE-2023-31154 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31154 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

SUSE CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...

CVE-2022-31154

creationtimestamp| type| source ---|---|--- 2022-08-01 22:17:05+00:00| seen| https://t.me/cibsecurity/47369 2025-04-23 18:05:47+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13105...

CVE-2022-31154 Indirect Object Access in Sourcegraph Code Monitoring

Sourcegraph is an opensource code search and navigation engine. It is possible for an authenticated Sourcegraph user to edit the Code Monitors owned by any other Sourcegraph user. This includes being able to edit both the trigger and the action of the monitor in question. An attacker is not able ...

CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...

DEBIAN-CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...

CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...

CVE-2021-31154

CVE-2021-31154 affects pleaser before 0.4.0. The issue arises from using predictable temporary filenames in /tmp and the target directory, enabling a local attacker to stage a symlink attack and gain full root privileges. Exploitation details are not provided in the connected documents beyond the...

CVE-2021-31154

pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack...