17471 matches found
CVE-2022-21794
Improper authentication in BIOS firmware for some IntelR NUC Boards, IntelR NUC Business, IntelR NUC Enthusiast, IntelR NUC Kits before version HN0067 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-29510
Improper buffer restrictions in some IntelR Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-29262
Improper buffer restrictions in some IntelR Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
PT-2025-5870 · Ibm · Ibm Entirex
Name of the Vulnerable Software and Affected Versions: IBM EntireX version 11.1 Description: The issue allows a local user to obtain sensitive information when a detailed technical error message is returned. This information could be used in further attacks against the system. Recommendations: Fo...
CVE-2022-29919
Use after free in the IntelR VROC software before version 7.7.6.1003 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-41958
super-xray is a web vulnerability scanning tool. Versions prior to 0.7 assumed trusted input for the program config which is stored in a yaml file. An attacker with local access to the file could exploit this and compromise the program. This issue has been addressed in commit 4d0d5966 and will be...
CVE-2022-32766
Improper input validation for some IntelR BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36372
Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36374
Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36949
In Veritas NetBackup OpsCenter, an attacker with local access to a NetBackup OpsCenter server could potentially escalate their privileges. This affects 8.x through 8.3.0.2, 9.x through 9.0.0.1, 9.1.x through 9.1.0.1, and 10...
CVE-2022-36985
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 and related NetBackup products. An attacker with unprivileged local access to a Windows NetBackup Primary server could potentially escalate their privileges...
CVE-2022-36370
Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2022-36339
Improper input validation in firmware for IntelR NUC 8 Compute Element, IntelR NUC 11 Compute Element, IntelR NUC 12 Compute Element may allow a privileged user to enable escalation of privilege via local access...
CVE-2022-36348
Active debug code in some Intel R SPS firmware before version SPSE504.04.04.300.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-36955
In Veritas NetBackup, an attacker with unprivileged local access to a NetBackup Client may send specific commands to escalate their privileges. This affects 8.0 through 8.1.2, 8.2, 8.3 through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1...
CVE-2022-36278
Insufficient control flow management in the IntelR Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-45112
Improper access control in some IntelR VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-45868
The web-based admin console in H2 Database Engine before 2.2.220 can be started via the CLI with the argument -webAdminPassword, which allows the user to specify the password in cleartext for the web admin console. Consequently, a local user or an attacker that has obtained local access through...
CVE-2022-42308
An issue was discovered in Veritas NetBackup through 8.2 and related Veritas products. An attacker with local access can delete arbitrary files by leveraging a path traversal in the pbxexchange registration code...