CVE-2024-35215

NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform SDP versions 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process...

CVE-2024-35215

NULL pointer dereference in IP socket options processing of the Networking Stack in QNX Software Development Platform SDP versions 7.1 and 7.0 could allow an attacker with local access to cause a denial-of-service condition in the context of the Networking Stack process...

CVE-2024-34672

Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...

PT-2024-7306 · Intel · Intel Tdx Module

Name of the Vulnerable Software and Affected Versions: Intel TDX Module firmware versions prior to 1.5.06 Description: The issue is related to an improper check for unusual or exceptional conditions in the Intel TDX Module firmware. This may allow a privileged user to potentially enable informati...

PT-2025-11522 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.4.x through 10.6.0.x Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as Command Injection. This could allow a high privileged...

PT-2024-14789 · Unknown · Himed Cockpit 18 Pro +2

Name of the Vulnerable Software and Affected Versions: HiMed Cockpit 12 pro versions 11.5.1 through 11.6.2 HiMed Cockpit 14 pro+ versions 11.5.1 through 11.6.2 HiMed Cockpit 18 pro versions 11.5.1 through 11.6.2 HiMed Cockpit 18 pro+ versions 11.5.1 through 11.6.2 Description: A restricted deskto...

CVE-2024-47975

CVE-2024-47975 concerns improper access control validation in the firmware of Solidigm DC Products. The vulnerability could allow a device with physical access to gain unauthorized access or a local attacker to potentially cause denial of service. The available sources describe the affected produ...

PT-2024-32925 · Solidigm · Solidigm Dc Products

Name of the Vulnerable Software and Affected Versions: Solidigm DC Products affected versions not specified Description: The issue is related to improper access control validation in the firmware of some Solidigm DC Products. This may allow an attacker with physical access to gain unauthorized...

intel-microcode: Race conditions in some Intel(R) Processors

A flaw was found in intel-microcode. The hardware logic contains race conditions in some IntelR processors that may allow an authenticated user to enable partial information disclosure via local access...

intel-microcode: Unexpected behavior in Intel(R) Core(TM) Ultra Processors

A flaw was found in intel-microcode. The sequence of processor instructions leads to unexpected behavior in IntelR CoreTM Ultra processors that may allow an authenticated user to enable a denial of service via local access...

CentOS 9 : microcode_ctl-20240910-1.el9

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the microcodectl-20240910-1.el9 build changelog. - Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information...

CVE-2023-52948

Missing encryption of sensitive data vulnerability in settings functionality in Synology Active Backup for Business Agent before 2.7.0-3221 allows local users to obtain user credential via unspecified vectors...

mod_jk: information Disclosure / DoS

An Incorrect Default Permissions vulnerability was found in Apache Tomcat Connectors that allows local users to view and modify shared memory containing modjk configuration, which may lead to information disclosure and denial of service...

kernel: wifi: mt76: replace skb_put with skb_put_zero

A potential flaw was found in the Linux kernel’s MediaTek WiFi, where it was reusing uninitialized data. This flaw allows a local user to gain unauthorized access to some data potentially...

kernel: wifi: mt76: replace skb_put with skb_put_zero

A potential flaw was found in the Linux kernel’s MediaTek WiFi, where it was reusing uninitialized data. This flaw allows a local user to gain unauthorized access to some data potentially...

PT-2024-31502 · Diebold Nixdorf · Vynamic View

Name of the Vulnerable Software and Affected Versions: Diebold Nixdorf Vynamic View versions up to 5.9.4 Description: The issue concerns the exposure of sensitive information to unauthorized actors, identified as CWE-200. Local access is required for exploitation, and there is no public exploit...

CVE-2024-6785

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...

CVE-2024-6785

CVE-2024-6785 affects MOXA MXview One Series (versions before 1.4.1) and MXview One Central Manager Series (before 1.0.3). The issue is cleartext storage of credentials in the configuration file, exploitable by an attacker with local access who can read/modify the file, potentially abusing the se...

CVE-2024-6785 MXview One and MXview One Central Manager Series store cleartext credentials in a local file

The configuration file stores credentials in cleartext. An attacker with local access rights can read or modify the configuration file, potentially resulting in the service being abused due to sensitive information exposure...

OESA-2024-2158 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access.CVE-2024-23984 Improper finite state machines FSMs in...