CVE-2024-2637

The CVE-2024-2637 issue is an Uncontrolled Search Path Element vulnerability affecting multiple B&R Industrial Automation products: Scene Viewer, Automation Runtime, mapp Vision, mapp View, mapp Cockpit, mapp Safety, VC4, APROL, various CAN drivers, Tou0ch Lock, B&R Single-Touch Driver, Serial Us...

CVE-2024-2637 Insecure Loading of Code in B&R Products

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

CVE-2024-33583: Hidden Functionality

A vulnerability has been identified in SIMATIC RTLS Locating Manager 6GT2780-0DA00 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA10 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA20 All versions V3.0.1.1, SIMATIC RTLS Locating Manager 6GT2780-0DA30 All versions...

CVE-2021-22280: Improper Input Validation

Improper DLL loading algorithms in B&R Automation Studio versions =4.0 and 4.12 may allow an authenticated local attacker to execute code in the context of the product...

CVE-2024-2637: Uncontrolled Search Path Element

An Uncontrolled Search Path Element vulnerability in B&R Industrial Automation Scene Viewer, B&R Industrial Automation Automation Runtime, B&R Industrial Automation mapp Vision, B&R Industrial Automation mapp View, B&R Industrial Automation mapp Cockpit, B&R Industrial Automation mapp Safety, B&R...

CVE-2024-28132

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-25957: Insertion of Sensitive Information into Log File

Dell Grab for Windows, versions 5.0.4 and below, contains a cleartext storage of sensitive information vulnerability in its appsync module. An authenticated local attacker could potentially exploit this vulnerability, leading to information disclosure that could be used to access the appsync...

Intel Converged Security and Management Engine Input Validation Error Vulnerability

Intel Converged Security and Management Engine CSME is a security management engine from Intel Corporation USA. An input validation error vulnerability exists in Intel Converged Security and Management Engine versions prior to 2328.5.5.0, which stems from the presence of an input validation error...

CVE-2024-20320

A vulnerability in the SSH client feature of Cisco IOS XR Software for Cisco 8000 Series Routers and Cisco Network Convergence System NCS 540 Series and 5700 Series Routers could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to...

Cisco IOS XR Security Vulnerability

Cisco IOS XR is a set of operating systems developed by Cisco for its network devices. A security vulnerability exists in Cisco IOS XR that stems from insufficient validation of parameters contained in SSH client CLI commands, which could allow an authenticated, local attacker to elevate root...

Cisco Duo Security Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. providing secure access to your applications and data. A security vulnerability exists in Cisco Duo that stems from a flaw in the logging component that could allow an authenticated, local attacker to view sensitive information in plaintext o...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a denial of service vulnerability caused by a flaw related to the Add Monitor interface. An authenticated, local attacker could exploit this...

CVE-2021-33162

Improper access control in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow an authenticated user to potentially enable escalation of privilege via local access...

SystemLink Server Security Vulnerability

NI SystemLink Server is an application from NI that helps engineers implement cost-effective and locally managed test and measurement standardization, automation, and digitization tools. A security vulnerability exists in SystemLink Server 2023 Q3 and prior versions, which stems from a failure to...

NI SystemLink Server Security Vulnerability

NI SystemLink Server is an application from NI that helps engineers implement cost-effective and locally managed test and measurement standardization, automation and digitization tools. A security vulnerability exists in NI SystemLink Server 2023 Q3 and prior versions, which stems from a failure ...

CVE-2023-26592

Deserialization of untrusted data in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access...

Intel SGX DCAP Software Security Vulnerability

Intel SGX DCAP Software is an Intel Corporation USA software that provides access control for enclaves in SGX. A security vulnerability previously existed in Intel SGX DCAP Software version 1.19.100.3, which stemmed from improper input validation in the affected product. It could result in an...

Intel VROC software security vulnerability

Intel VROC software is an application from Intel Corporation USA. A security vulnerability exists in Intel VROC software prior to version 8.0.8.1001, which stems from an incorrect default privilege issue that could lead to privilege escalation via local access by an authenticated user...

PT-2024-1786 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: Intel Battery Life Diagnostic Tool versions prior to 2.3.1 Description: The issue is related to an uncontrolled search path element in the Intel Battery Life Diagnostic Tool software. Exploitation of this issue may allow an attacker to escala...

Intel Server Product OpenBMC Security Vulnerability

Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in the Intel Server Product OpenBMC firmware egs-1.09 version, which stemmed from improper authentication in the affected product. It...