CVE-2019-3592

Privilege escalation vulnerability in McAfee Agent MA before 5.6.1 HF3, allows local administrator users to potentially disable some McAfee processes by manipulating the MA directory control and placing a carefully constructed file in the MA directory...

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

UBUNTU-CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

CVE-2024-56161

CVE-2024-56161 concerns AMD SEV-SNP: Improper signature verification in the AMD CPU ROM microcode patch loader may permit a local administrator to load tampered microcode, compromising confidentiality and integrity of a confidential guest. Affected component: AMD microcode patch loader; root caus...

VMware Aria Operations 安全漏洞

VMware Aria Operations is a unified, AI-driven, autopilot IT operations management platform for private, hybrid, and multi-cloud environments from VMware, Inc. A security vulnerability exists in VMware Aria Operations that stems from a local elevation of privilege issue that allows a malicious...

PT-2024-7561 · Beckhoff · Twincat Package Manager

Name of the Vulnerable Software and Affected Versions: TwinCAT Package Manager affected versions not specified Description: A local user with administrative access rights can enter specially crafted values for settings at the user interface UI of the TwinCAT Package Manager, which can cause...

Beckhoff TwinCAT 操作系统命令注入漏洞

Beckhoff TwinCAT is a software system from Beckhoff, Germany, consisting of a real-time environment and a real-time system for executing control programs in a development environment. The system is mainly used for PLC Programmable Logic Controller programming, diagnostics and system configuration...

PT-2024-36507 · Opentext · Opentext Operations Agent

Name of the Vulnerable Software and Affected Versions: OpenText Operations Agent versions 12.20 through 12.26 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This could allow an attacker with local admin...

CVE-2022-49040

Buffer copy without checking size of input 'Classic Buffer Overflow' vulnerability in connection management functionality in Synology Drive Client before 3.4.0-15721 allows local users with administrator privileges to crash the client via unspecified vectors...

Synology Drive 安全漏洞

Synology Drive is a collaborative office suite from China-based Synology Inc. The product includes document management, collaborative office and file synchronization and backup features. A security vulnerability exists in Synology Drive before 3.4.0-15721, which stems from an out-of-bounds write...

July 9, 2024—KB5040438 (OS Build 25398.1009)

None None...

Ivanti EPM 安全漏洞

Ivanti EPM is a one-stop shop for managing user profiles and all client devices from Ivanti USA. A security vulnerability exists in Ivanti EPM that originates from an uncontrolled search path. A local, authenticated attacker with administrator privileges could escalate their privileges to the...

PT-2024-6214 · Ivanti · Ivanti Epm

Name of the Vulnerable Software and Affected Versions: Ivanti EPM versions prior to 2022 SU6 Ivanti EPM versions prior to the 2024 September update Description: The issue is related to an uncontrolled search path in the agent of Ivanti EPM. This can be exploited by a local authenticated attacker...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS, which stems from the presence of an information disclosure vulnerability that allows a local system administrator to...

QNAP Systems QTS和QNAP Systems QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China's Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS version 5.1.8.282...

PT-2024-24837

Name of the Vulnerable Software and Affected Versions QTS versions prior to 5.1.8.2823 build 20240712 QuTS hero versions prior to h5.1.8.2823 build 20240712 Description A vulnerability has been reported to affect Network & Virtual Switch, allowing local authenticated administrators to gain access...

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

CVE-2024-37086

VMware ESXi contains an out-of-bounds read vulnerability. A malicious actor with local administrative privileges on a virtual machine with an existing snapshot may trigger an out-of-bounds read leading to a denial-of-service condition of the host...