17460 matches found
kernel: wifi: mt76: replace skb_put with skb_put_zero
A potential flaw was found in the Linux kernel’s MediaTek WiFi, where it was reusing uninitialized data. This flaw allows a local user to gain unauthorized access to some data potentially...
kernel: wifi: mt76: replace skb_put with skb_put_zero
A potential flaw was found in the Linux kernel’s MediaTek WiFi, where it was reusing uninitialized data. This flaw allows a local user to gain unauthorized access to some data potentially...
PT-2024-31502 · Diebold Nixdorf · Vynamic View
Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf Vynamic View versions up to 5.9.4 Description: The issue concerns the exposure of sensitive information to unauthorized actors, identified as CWE-200. Local access is required for exploitation, and there is no public exploit...
CVE-2024-6785
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...
CVE-2024-6785
CVE-2024-6785 affects MOXA MXview One Series (versions before 1.4.1) and MXview One Central Manager Series (before 1.0.3). The issue is cleartext storage of credentials in the configuration file, exploitable by an attacker with local access who can read/modify the file, potentially abusing the se...
CVE-2024-6785 MXview One and MXview One Central Manager Series store cleartext credentials in a local file
The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...
OESA-2024-2158 microcode_ctl security update
This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access.CVE-2024-23984 Improper finite state machines FSMs in...
SUSE-SU-2024:3307-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: - Intel CPU Microcode was updated to the 20240910 release bsc1230400 - CVE-2024-23984: Observable discrepancy in RAPL interface for some Intel Processors may allow a privileged user to potentially enable information disclosure via local...
Important: microcode_ctl
Issue Overview: Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2023-49141 Insufficient control flow management for some IntelR Xeon Processors may allow an authenticated user t...
CVE-2024-24968
A flaw was found in intel Processors. Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to enable a denial of service via local access...
Amazon Linux AMI : microcode_ctl (ALAS-2024-1946)
The version of microcodectl installed on the remote host is prior to 2.1-47.43. It is, therefore, affected by a vulnerability as referenced in the ALAS-2024-1946 advisory. Improper isolation in some IntelR Processors stream cache mechanism may allow an authenticated user to potentially enable...
CVE-2024-34543
Improper access control in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-24968
Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...
CVE-2024-32666
NULL pointer dereference in IntelR RAID Web Console software for all versions may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-33848
Uncaught exception in IntelR RAID Web Console software all versions may allow an authenticated user to potentially enable denial of service via local access...
ALPINE-CVE-2024-24968
Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...
CVE-2024-24968
Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...
CVE-2024-23984
Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...