Intel Server Board 安全漏洞

Intel Server Board is a server motherboard from Intel Corporation USA. A security vulnerability exists in Intel Server Board that stems from an incorrect default privilege issue. It may allow authenticated users to escalate privileges via local access...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget that stems from the presence of a buffer overflow issue. It could allow an authenticated user to escalate privileges...

Intel Endurance Gaming Mode 安全漏洞

Intel Endurance Gaming Mode is a feature from Intel Corporation USA used to extend the gaming life of laptops when unplugged. A security vulnerability previously existed in Intel Endurance Gaming Mode version 1.3.937.0, which stemmed from an incorrect default permissions issue. It could allow...

PT-2024-13290 · Intel · Intel Wireless Bluetooth

Name of the Vulnerable Software and Affected Versions: IntelR Wireless BluetoothR products for Windows versions prior to 23.20 Description: The issue is related to an improper conditions check that may allow a privileged user to potentially enable denial of service via local access...

Intel Wireless Bluetooth 安全漏洞

Intel Wireless Bluetooth is a driver tool from Intel USA that can effectively solve some problems with intel bluetooth in win10 system. A security vulnerability exists prior to Intel Wireless Bluetooth version 23.20, which stems from the presence of an improper condition checking issue. It could...

Intel BIOS Guard firmware 安全漏洞

Intel Bios is a basic input-output system used by Intel Corporation USA to perform hardware initialization during the power-on boot phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in the Intel BIOS Guard firmware that stems from t...

Intel Graphics Performance Analyzers 安全漏洞

Intel Graphics Performance Analyzers Intel GPA is a graphics performance analyzer from Intel Corporation USA. A security vulnerability previously existed in Intel Graphics Performance Analyzers version 2023.3, which stemmed from an improper access control issue. It could allow an authenticated us...

CVE-2024-27244

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-27244

Summary (CVE-2024-27244) Zoom Workplace VDI App for Windows contains an issue where the installer performs insufficient validation of data authenticity, enabling an authenticated user to escalate privileges via local access. Documented impact is elevation of privilege with local access; no exploi...

CVE-2024-27244 Zoom Workplace VDI App for Windows - Insufficient Verification of Data Authenticity

Insufficient verification of data authenticity in the installer for Zoom Workplace VDI App for Windows may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-20394

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to the inability to handle unexpected input. An attacker who has local device access could explo...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution Administrator/Root rights Remote...

PT-2024-14844 · Arc · Arc

Name of the Vulnerable Software and Affected Versions: Arc affected versions not specified Description: The local web interface provided during the configuration of Arc lacks authentication, making it vulnerable to abuse by local attackers or malware. This could allow a malicious local user or...

Zoom Workplace 安全漏洞

Zoom Workplace VDI App for Windows is a client application designed for virtualized desktop environments such as Windows 365 Cloud PCs, supporting virtualization platforms such as Azure Virtual Desktop. An elevation of privilege vulnerability exists in the Zoom Workplace VDI App for Windows, whic...

CVE-2024-32742

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem...

CVE-2024-3037

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

CVE-2024-32742

Affected product: Siemens SIMATIC CN 4100 (all versions

CVE-2024-32742

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem...

CVE-2024-3037 Arbitrary File Deletion in PaperCut NG/MF Web Print

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

CVE-2024-3037

CVE-2024-3037 (and related CVE-2024-8404) describe an arbitrary file deletion vulnerability in PaperCut NG/MF running on Windows with Web Print enabled. An attacker must have local login access and be able to execute low-privilege code on the PaperCut host, exploiting a web-print-hot-folder/Web P...