Amazon Linux 2023 : microcode_ctl (ALAS2023-2024-748)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2024-748 advisory. 2024-12-05: CVE-2024-21820 was added to this advisory. 2024-12-05: CVE-2024-21853 was added to this advisory. 2024-12-05: CVE-2024-23918 was added to this advisory. Incorrect default permission...

Insecure Temporary File

Overview Affected versions of this package are vulnerable to Insecure Temporary File through the use of the deprecated mktemp function, there is a risk of race conditions. This occurs because the function generates a temporary file name without ensuring exclusive access, allowing an opportunity f...

PT-2024-32632 · Dell · Dell Data Lakehouse

Name of the Vulnerable Software and Affected Versions: Dell Data Lakehouse versions 1.0.0.0 through 1.1.0.0 Description: The issue is related to an Improper Neutralization of Special Elements used in an SQL Command, also known as SQL Injection. This could allow an unauthenticated attacker with...

Oracle Linux 8 : edk2 (ELSA-2024-12795)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12795 advisory. - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division- By-Zero due to a UNIT32 overflow via local...

Oracle Linux 7 : edk2 (ELSA-2024-12793)

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2024-12793 advisory. - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division- By-Zero due to a UNIT32 overflow via local...

K000141509: Intel UEFI vulnerability CVE-2024-21781

Security Advisory Description Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to enable information disclosure or denial of service via local access. CVE-2024-21781 Impact Attackers may exploit this vulnerability to enable privilege escalation via...

K000141511: Intel UEFI vulnerability CVE-2023-43626

Security Advisory Description Improper access control in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-43626 Impact Attackers may exploit this vulnerability to enable privilege escalation via local...

K000141503: Intel UEFI vulnerability CVE-2023-42772

Security Advisory Description Untrusted pointer dereference in UEFI firmware for some IntelR reference processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-42772 Impact There is no impact; F5 products are not affected by this vulnerabilit...

K000141500: Intel BIOS vulnerability CVE-2024-23599

Security Advisory Description Race condition in Seamless Firmware Updates for some IntelR reference platforms may allow a privileged user to potentially enable denial of service via local access. CVE-2024-23599 Impact Attackers may exploit this vulnerability to enable privilege escalation via loc...

K000141505: Intel UEFI vulnerability CVE-2024-21829

Security Advisory Description Improper input validation in UEFI firmware error handler for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-21829 Impact Attackers may exploit this vulnerability to enable privilege escalati...

CVE-2024-45710

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...

CVE-2024-45710

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...

CVE-2024-45710 SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...

CVE-2024-45710 SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

SolarWinds Platform is susceptible to an Uncontrolled Search Path Element Local Privilege Escalation vulnerability. This requires a low privilege account and local access to the affected node machine...

PT-2024-8146 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.3.x through 10.5.6.x Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as a Command Injection vulnerability. This could allow a...

PT-2024-8147 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 versions 10.5.3.x through 10.5.6.x Description: The issue is related to improper privilege management in the network operating system, which could allow an attacker to elevate their privileges. A low-privileged attacker...

CVE-2024-45273

An unauthenticated local attacker can decrypt the devices config file and therefore compromise the device due to a weak implementation of the encryption used...

Helmholz REX100 安全漏洞

The Helmholz REX100 is a wireless router from Helmholz. A security vulnerability exists in Helmholz REX100 versions prior to 2.3.1, which originates from the ability of an unauthenticated, local attacker to decrypt the device configuration file...

CentOS 7 : kernel (RHSA-2022:1198)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:1198 advisory. - A flaw in the Linux kernel's implementation of RDMA communications manager listener code allowed an attacker with local access to setup a socket to...

CentOS 7 : kpatch-patch (RHSA-2020:0028)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0028 advisory. - Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated user to...