CVE-2024-37081

The vCenter Server contains multiple local privilege escalation vulnerabilities due to misconfiguration of sudo. An authenticated local user with non-administrative privileges may exploit these issues to elevate privileges to root on vCenter Server Appliance...

Zyxel NAS Multiple Vulnerabilities

The Zyxel NAS is potentially affected by multiple vulnerabilities. - This command injection vulnerability in the 'setCookie' parameter in Zyxel NAS326 and NAS542 devices could allow an unauthenticated attacker to execute some OS commands by sending a crafted HTTP POST request. CVE-2024-29973 - Th...

Dell BIOS 缓冲区错误漏洞

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. Dell BIOS suffers from a buffer overflow vulnerability that originates from a boundary error when the application processes untrusted input. A local, authenticated attacker with administrator...

CVE-2024-29975

UNSUPPORTED WHEN ASSIGNED The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an authenticated local attacker with administrator privileges to execute...

CVE-2024-29975

UNSUPPORTED WHEN ASSIGNED The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an authenticated local attacker with administrator privileges to execute...

CVE-2024-29975

UNSUPPORTED WHEN ASSIGNED The improper privilege management vulnerability in the SUID executable binary in Zyxel NAS326 firmware versions before V5.21AAZF.17C0 and NAS542 firmware versions before V5.21ABAG.14C0 could allow an authenticated local attacker with administrator privileges to execute...

CVE-2024-5523

SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated local user to send a specially crafted SQL query to the 'searchString' parameter and retrieve all information stored in the database...

CVE-2024-5523 SQL injection vulnerability in Astrotalks

SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated local user to send a specially crafted SQL query to the 'searchString' parameter and retrieve all information stored in the database...

CVE-2024-22026

A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance...

CVE-2024-0816

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50ABVY.4C0 could allow an authenticated local attacker to cause denial of service DoS conditions by executing the CLI command with crafted strings on an affected device...

PT-2024-24974 · Tenable · Nessus Agent

Name of the Vulnerable Software and Affected Versions: Nessus Agent affected versions not specified Description: A race condition issue allows an authenticated, local attacker on a Windows host to modify installation parameters, potentially leading to the execution of arbitrary code on the host...

CVE-2024-21861

Uncontrolled search path in some IntelR GPA Framework software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

UBUNTU-CVE-2023-48368

Improper input validation in IntelR Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-46689

Improper neutralization in IntelR Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget, which stems from an improper neutralization issue. It could allow an authenticated user to escalate privileges via...

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability previously existed in Intel Neural Compressor version 2.5.0, which stemmed from the presence of a race condition issue. It coul...

PT-2024-19060 · Intel · Intel Neural Compressor

Name of the Vulnerable Software and Affected Versions: IntelR Neural Compressor versions prior to 2.5.0 Description: A Time-of-check Time-of-use race condition may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: For versions prior to...

IIntel Context Sensing Technology 安全漏洞

Intel Context Sensing Technology is a group of technologies from Intel Corporation USA that allow devices to understand and adapt to contextual information about their surroundings to provide a more intelligent and personalized user experience. A security vulnerability previously existed in Intel...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget that stems from an improper initialization issue. It could allow an authenticated user to conduct a denial of servic...

PT-2024-19084 · Intel · Intel Quartus Prime Lite Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Lite Edition Design software versions prior to 23.1 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege vi...