PT-2024-25725 · Intel · Intel Nuc

Name of the Vulnerable Software and Affected Versions: IntelR NUC affected versions not specified Description: The issue is related to improper input validation in the firmware of some IntelR NUC devices. This may allow a privileged user to potentially enable escalation of privilege via local...

PT-2024-8894 · Intel · Intel Ish

Name of the Vulnerable Software and Affected Versions: IntelR ISH software affected versions not specified Description: The issue is related to incorrect default permissions in some IntelR ISH software installers, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2024-21281 · Intel · Intel Uefi Integrator Tools

Name of the Vulnerable Software and Affected Versions: IntelR UEFI Integrator Tools on Aptio V for IntelR NUC affected versions not specified Description: The issue is related to improper access control in IntelR UEFI Integrator Tools on Aptio V for IntelR NUC, which may allow an authenticated us...

PT-2024-7105 · Intel · Intel Converged Security/Manageability Engine

Name of the Vulnerable Software and Affected Versions: Intel Converged Security and Manageability Engine CSME affected versions not specified Description: The issue is related to insufficient input validation in the Intel Converged Security and Manageability Engine CSME firmware, which may allow ...

PT-2024-8900 · Intel · Intel License Manager For Flexlm

Name of the Vulnerable Software and Affected Versions: IntelR License Manager for FLEXlm product software versions prior to 11.19.5.0 Description: The issue is related to an uncontrolled search path in the Intel License Manager for FLEXlm product software. This could allow an authenticated user t...

PT-2024-6975 · Intel · Intel Connectivity Performance Suite

Name of the Vulnerable Software and Affected Versions: Intel Connectivity Performance Suite versions prior to 2.0 Description: The issue is related to incorrect default permissions in the Intel Connectivity Performance Suite software installer. This could allow an authenticated user to potentiall...

PT-2024-13755

Name of the Vulnerable Software and Affected Versions Apache Portable Runtime versions 0.9.0 through 1.7.4 Description Lax permissions set by the Apache Portable Runtime library on Unix platforms would allow local users read access to named shared memory segments, potentially revealing sensitive...

CVE-2024-43168

CVE-2024-43168 affects Unbound: a heap-buffer-overflow in cfg_mark_ports (config_file.c) may allow memory corruption. With local access, an attacker can provide crafted input, potentially crashing the app or enabling arbitrary code execution (DoS/unauthorized actions). The descriptor includes a d...

CVE-2024-43168

DISPUTE NOTE: this issue does not pose a security risk as it according to analysis by the original software developer, NLnet Labs falls within the expected functionality and security controls of the application. Red Hat has made a claim that there is a security risk within Red Hat products. NLnet...

CVE-2024-34632

Out-of-bounds read in uuid parsing in Samsung Notes prior to version 4.4.21.62 allows local attacker to access unauthorized memory...

wpa_supplicant 安全漏洞

wpasupplicant is a cross-platform WPA request program. The program supports WEP, WPA, and WPA2, among others. A security vulnerability exists in wpasupplicant that stems from an issue with loading arbitrary shared objects, which allows a local, unprivileged attacker to elevate privileges to a use...

PT-2024-26032 · Unknown · Knoxdualdarpolicy

Name of the Vulnerable Software and Affected Versions: KnoxDualDARPolicy versions prior to SMR Aug-2024 Release 1 Description: The issue is related to the improper handling of insufficient permission, allowing local attackers to access sensitive data. This could potentially lead to unauthorized...

PT-2024-7719 · Teamviewer · Teamviewer

Name of the Vulnerable Software and Affected Versions: TeamViewer Remote Clients versions prior to 15.58.4 Description: The issue is related to improper verification of cryptographic signatures during the installation of a printer driver via the TeamViewer service.exe component. This allows an...

PT-2024-19135 · Amd +1 · Amd Epyc Embedded 9003 Snp Firmware +1

Name of the Vulnerable Software and Affected Versions: AMD EPYC Embedded 9003 SNP Firmware affected versions not specified Description: The issue is related to improper restriction of write operations in SNP firmware, which could allow a malicious hypervisor to potentially overwrite a guest's...

CVE-2024-7358

A vulnerability was found in Point B Ltd Getscreen Agent 2.19.6 on Windows. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file getscreen.msi of the component Installation. The manipulation leads to creation of temporary file with insecure...

CVE-2024-7358

CVE-2024-7358 affects Point B Ltd Getscreen Agent 2.19.6 on Windows, in the Installation component (getscreen.msi). The issue arises from an unspecified function that leads to the creation of a temporary file with insecure permissions, requiring local access to exploit. Public exploit disclosure ...

CVE-2024-7358 Point B Ltd Getscreen Agent Installation getscreen.msi temp file

A vulnerability was found in Point B Ltd Getscreen Agent 2.19.6 on Windows. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file getscreen.msi of the component Installation. The manipulation leads to creation of temporary file with insecure...

CVE-2024-7358 Point B Ltd Getscreen Agent Installation getscreen.msi temp file

A vulnerability was found in Point B Ltd Getscreen Agent 2.19.6 on Windows. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file getscreen.msi of the component Installation. The manipulation leads to creation of temporary file with insecure...

PT-2024-38289 · Point B · Getscreen Agent

Name of the Vulnerable Software and Affected Versions: Point B Ltd Getscreen Agent version 2.19.6 Description: A critical issue was found in the Installation component of the software, specifically in the getscreen.msi file, which leads to the creation of a temporary file with insecure permission...

CVE-2024-7325

A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The...