Cisco Meraki Systems Manager 安全漏洞

Cisco Meraki Systems Manager Cisco Meraki SM is a systems manager from Cisco USA. A security vulnerability exists in Cisco Meraki Systems Manager that stems from incorrect handling of directory search paths, allowing an authenticated, local attacker to execute arbitrary code with elevated...

PT-2024-7813 · Siemens · Sinumerik 828D V4 +3

Name of the Vulnerable Software and Affected Versions: SINUMERIK 828D V4 All versions SINUMERIK 828D V5 All versions V5.24 SINUMERIK 840D sl V4 All versions SINUMERIK ONE All versions V6.24 Description: A vulnerability has been identified in the affected devices, which do not properly enforce...

DEBIAN-CVE-2024-20506

A vulnerability in the ClamD service module of Clam AntiVirus ClamAV versions 1.4.0, 1.3.2 and prior versions, all 1.2.x versions, 1.0.6 and prior versions, all 0.105.x versions, all 0.104.x versions, and 0.103.11 and all prior versions could allow an authenticated, local attacker to corrupt...

Cisco Identity Services Engine 安全漏洞

Cisco Identity Services Engine Cisco ISE is an environment-aware platform ISE Identity Services Engine from Cisco USA. The platform regulates the network by collecting real-time information from the network, users, and devices, and formulating and enforcing policies accordingly. A security...

CVE-2024-5623

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

B&R APROL 安全漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A security vulnerability exists in B&R APROL that stems from the presence of an untrusted search path vulnerability that allows an authenticated, local attacker to execute arbitrary code with...

Rockwell Automation ThinManager 安全漏洞

Rockwell Automation ThinManager is the United States Rockwell Rockwell Automation a thin client management software. A remote code execution vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be exploited by an authenticated, local attacker to submit a special request t...

SUSE CVE-2024-21810

Improper input validation in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39283

Incomplete filtering of special elements in IntelR TDX module software before version TDX1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-24973

Improper input validation for some IntelR Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-22184

Uncontrolled search path for some IntelR QuartusR Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-7930 · Intel · Intel Distribution For Gdb

Name of the Vulnerable Software and Affected Versions: IntelR Distribution for GDB software versions prior to 2024.0.1 Description: The issue is related to an uncontrolled search path in the IntelR Distribution for GDB software, which may allow an authenticated user to potentially enable escalati...

CVE-2024-39827

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

Zoom Workplace Security Vulnerability

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper input validation in the desktop application installer could allow an authenticated user to perform a denial of service via local access...

CVE-2024-39568

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker...

CVE-2024-39567

A vulnerability has been identified in SINEMA Remote Connect Client All versions V3.2 HF1. The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker t...

Medicalis Workflow Orchestrator Security Breach

Siemens Medicalis Workflow Orchestrator is a workflow orchestrator from Siemens Germany. It can be used as a common platform to standardize the workflow of radiologists. A security vulnerability exists in all versions of Medicalis Workflow Orchestrator that stems from the application executing as...

Cisco NX-OS Software 操作系统命令注入漏洞

Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A command injection vulnerability exists in Cisco NX-OS Software, which arises from insufficient validation of parameters passed to specific configuration CLI commands, and...

SUSE CVE-2023-22656

Out-of-bounds read in IntelR Media SDK and some IntelR oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

WordPress WP Magazine Modules Lite plugin <= 1.1.2 - Authenticated Local File Inclusion vulnerability

Authenticated Local File Inclusion vulnerability discovered by stealthcopter in WordPress Plugin WP Magazine Modules Lite versions = 1.1.2...