Dell Client Platform BIOS Buffer Overflow Vulnerability

Dell Client Platform is a client platform from Dell USA. The Dell Client Platform BIOS suffers from a buffer overflow vulnerability that originates from a boundary error in an externally developed component when handling untrusted input. An attacker with elevated privileges and local access could...

PT-2024-12234 · Ibm · Ibm Security Verify Access

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Access versions 10.0.0 through 10.0.7.1 Description: The issue allows a local user to obtain sensitive information from trace logs. Recommendations: For IBM Security Verify Access versions 10.0.0 through 10.0.7.1, consider...

CVE-2024-32855

The CVE-2024-32855 entry concerns Dell Client Platform BIOS where an externally developed component exposes an out-of-bounds write (boundary error) when handling untrusted input. The vulnerability can be exploited by a locally privileged attacker with high privileges and local access, potentially...

CVE-2024-32855

Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...

Hitachi Storage Provider for VMware vCenter Security Vulnerability

Hitachi Storage Provider for VMware vCenter is a flash and storage solution from Hitachi, Ltd. of Japan Hitachi. A security vulnerability exists in Hitachi Storage Provider for VMware vCenter versions 3.1.0 through prior to 3.7.4, which stems from a Default Privilege Error vulnerability that allo...

SUSE CVE-2023-45221

Improper buffer restrictions in IntelR Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2023-47169

Improper buffer restrictions in IntelR Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access...

SUSE CVE-2023-47282

Out-of-bounds write in IntelR Media SDK all versions and some IntelR oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

SUSE CVE-2023-48368

Improper input validation in IntelR Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access...

Medium: edk2

Issue Overview: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful exploit of this vulnerability may lead to a loss of Availability. CVE-2024-1298 Affected Packages: edk2 Note: This adviso...

OESA-2024-1752 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access. A successful...

PT-2024-8849 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 24.3.26.8 Description: The issue is related to insecure inherited permissions in IntelR DSA software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-6080

A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to th...

CVE-2024-6080

A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to th...

CVE-2024-6080

CVE-2024-6080 concerns Intelbras InControl 2.21.56, specifically the incontrolWebcam Service. The vulnerability arises from an unquoted search path in unknown code, enabling local access to trigger the issue. Public exploitation has been disclosed, and the recommended remediation is to upgrade to...

CVE-2024-6080 Intelbras InControl incontrolWebcam Service unquoted search path

A vulnerability classified as critical was found in Intelbras InControl 2.21.56. This vulnerability affects unknown code of the component incontrolWebcam Service. The manipulation leads to unquoted search path. Local access is required to approach this attack. The exploit has been disclosed to th...

DEBIAN-CVE-2024-6064

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

CVE-2024-6064

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

UBUNTU-CVE-2024-6064

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

CVE-2024-6064

CVE-2024-6064 affects GPAC 2.5-DEV-rev228-g11067ea92-master, specifically the MP4Box loader_xmt.c function xmt_node_end . The vulnerability is a use-after-free caused by the described manipulation, requiring local access . Public exploit information and a patch reference are provided: patch ident...