CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21958

CVE-2024-21958 concerns the AMD Provisioning Console, where incorrect default ACL permissions in the installation directory enable a local attacker with low privileges to escalate privileges, potentially achieve arbitrary code execution. The AMD bulletin describes the root cause as the installati...

CVE-2024-21957

The CVE-2024-21957 entry documents an issue in AMD Management Console: incorrect default ACL permissions in the installation directory could enable privilege escalation and potentially arbitrary code execution. Sources detail the affected product as AMD Management Console (AMC) and describe the r...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

kernel: tty: fix out-of-bounds access in tty_driver_lookup_tty()

An out-of-bounds access was found in the TTY subsystem. When an invalid console device is specified on the kernel command line e.g., console=tty3270, the driver lookup returns a TTY struct with an invalid index, causing a crash during boot...

kernel: Linux kernel: Denial of Service via use-after-free in vc_screen

A flaw was found in the Linux kernel. A local user can exploit a use-after-free UAF vulnerability in the vcscreen component. This occurs because a pointer to the vcdata structure is not reloaded after a console unlock operation, leading to the use of freed memory. Successful exploitation of this...

AMD Provisioning Console 安全漏洞

AMD Provisioning Console is an application from UltraMicroelectronics AMD that is used to create configuration packages to configure systems that support AMD Integrated Management Technology AIM-T. AMD Provisioning Console has a security vulnerability that stems from incorrect default permissions...

PT-2025-25867

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.10.137 Description A problem has been identified in the Linux kernel where a sleeping function is called from an invalid context. This issue occurs when the console lock function is called while holding a...

AMD Management Console Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9003 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within AMD Management Console Software. AMD Management Console AMC is a GUI-based manageability...

PT-2024-16121 · Tibco · Tibco Operational Intelligence +1

Name of the Vulnerable Software and Affected Versions: TIBCO Hawk and TIBCO Operational Intelligence affected versions not specified Description: A Cross-Site Scripting XSS vulnerability is present in mar.jar and monitoringconsolecommon.jar. This issue allows for potential system manipulation,...

AMD Provisioning Console Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9007 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within the AMD Provisioning Console Software. The researcher’s report noted that AMD Provisioning...

PT-2024-19126 · Amd · Management Console

Name of the Vulnerable Software and Affected Versions: AMD Management Console affected versions not specified Description: The issue is related to incorrect default permissions in the AMD Management Console installation directory, which could allow an attacker to achieve privilege escalation,...

AMD Management Console 安全漏洞

AMD Management Console is a graphical user interface GUI-based management application from UltraMicroelectronics AMD that is targeted at small and medium business SMB environments. AMD Management Console has a security vulnerability that stems from incorrect default permissions. An attacker...

Privileged escalation via crafted use of portcfg command

A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local authenticated attacker to perform a privileged escalation via crafted use of the portcfg command. This specific exploitation is only possible on IP Extensio...

The vulnerability in the Web Console Management Console of Veeam Backup Enterprise Manager allows a perpetrator to bypass authentication procedures.

The vulnerability of the Veeam Backup Enterprise Manager web management console relates to access to a channel from a non-endpoint location. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.40 packages and security update

Red Hat OpenShift Container Platform release 4.14.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.40 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.40 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...