CVE-2021-36325

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

Zyxel Vpn2S 操作系统命令注入漏洞

Zyxel Vpn2S is a reliable and secure Vpn router from China's Heqin Technology Zyxel. The Zyxel VPN2S suffers from an operating system command injection vulnerability that stems from a command injection vulnerability in the CGI program of the Zyxel VPN2S firmware version 1.12 that could allow an...

AppDynamics.NET Agent for Windows 安全漏洞

AppDynamics.NET Agent for Windows is intended to be used if you want to monitor IIS applications, Windows services, or standalone applications. A security vulnerability exists in AppDynamics.NET Agent for Windows versions prior to 21.7, which originates from the .NET Agent Coordinator service...

CVE-2021-0003

Improper conditions check in some IntelR Ethernet Controllers 800 series Linux drivers before version 1.4.11 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2021-0062

Improper input validation in some IntelR Graphics Drivers before version 27.20.100.8935 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-35030

A vulnerability was found in the CGI program in Zyxel GS1900-8 firmware version V2.60, that did not properly sterilize packet contents and could allow an authenticated, local user to perform a cross-site scripting XSS attack via a crafted LLDP packet...

DEBIAN-CVE-2020-24489

Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...

DEBIAN-CVE-2020-24513

Domain-bypass transient execution vulnerability in some Intel AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

hw: vt-d related privilege escalation

A flaw was found in Intel® VT-d products. Entries from the context cache on some types of context cache invalidations may not be properly invalidated which may allow an authenticated user to potentially enable escalation of privilege via local access. The highest threat from this vulnerability is...

UBUNTU-CVE-2020-24489

Incomplete cleanup in some IntelR VT-d products may allow an authenticated user to potentially enable escalation of privilege via local access...

Dell Wyse Management Suite 安全漏洞

Wyse Management Suite is a scalable solution for managing and optimizing Wyse endpoints from Dell, USA. The product includes features such as centralized management of Wyse endpoints, asset tracking and automated device discovery. A security vulnerability exists in Wyse Management Suite in Dell,...

CVE-2021-1421

A vulnerability in Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, local attacker to perform a command injection attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to a configuration command. An attacker could...

CVE-2020-12375

Heap overflow in the BMC firmware for some IntelR Server Boards, Server Systems and Compute Modules before version 2.47 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Ethernet I210 Controller Security Vulnerability

The Intel Ethernet I210 Controller is a hardware device from Intel Corporation USA. Providing a complete network protocol stack provides the basis for enabling small groups of computers in the same local area network as well as wide area networks connected via routing protocols. A security...

PT-2021-2102 · Intel · Intel(R) Soc Driver Package

Name of the Vulnerable Software and Affected Versions: IntelR SOC driver package for STK1A32SC versions prior to 604 Description: The issue is related to insecure inherited permissions for the IntelR SOC driver package, which may allow an authenticated user to potentially enable escalation of...

CVE-2021-1283

A vulnerability in the logging subsystem of Cisco Data Center Network Manager DCNM could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is...

Intel Thunderbolt DCH drivers information disclosure vulnerability

Intel Thunderbolt DCH drivers is a driver from Intel Corporation USA for Windows. A security vulnerability exists in the IntelR ThunderboltTM DCH drivers, which arises from a protection mechanism failure that could allow an authenticated user to potentially enable privileged escalation via local...

CVE-2020-8687

Uncontrolled search path in the installer for IntelR RSTe Software RAID Driver for the IntelR Server Board M10JNP2SB before version 4.7.0.1119 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-8717

Improper input validation in a subsystem for some Intel Server Boards, Server Systems and Compute Modules before version 1.59 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-5331

RSA Archer, versions prior to 6.7 P3 6.7.0.3, contain an information exposure vulnerability. Users’ session information could potentially be stored in cache or log files. An authenticated malicious local user with access to the log files may obtain the exposed information to use it in further...