CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-49560

Dell SmartFabric OS10 (Debian-based OS10 on Dell PowerSwitch) versions 10.5.3.x–10.5.6.x have a command injection vulnerability caused by insufficient input validation at command execution. A low-privileged, local attacker could exploit this to execute arbitrary commands. Connected sources corrob...

CVE-2024-47588

CVE-2024-47588 affects SAP NetWeaver Java (Software Update Manager 1.1). Under certain upgrade-error conditions, credentials are written in plaintext to a log file, enabling a local attacker (authenticated as a non-administrative user) to exfiltrate credentials from logs. The documented impact is...

CVE-2024-47588 Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

CVE-2024-47588 Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

PT-2024-8773 · Intel +1 · Intel Vpl +1

Name of the Vulnerable Software and Affected Versions: Intel VPL versions prior to 24.1.4 Description: The issue is related to improper buffer restrictions in Intel VPL software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to t...

PT-2024-8837 · Intel · Intel Server Board S2600St Family Bios/Firmware Update

Name of the Vulnerable Software and Affected Versions: Intel Server Board S2600ST Family BIOS and Firmware Update software all versions Description: The issue is related to an uncontrolled search path element in the Intel Server Board S2600ST Family BIOS and Firmware Update software. This could...

PT-2024-8774 · Intel +1 · Intel Vpl +1

Name of the Vulnerable Software and Affected Versions: Intel VPL software versions prior to 24.1.4 Description: The issue is related to an integer overflow in some Intel VPL software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This can be...

PT-2024-8819 · Intel · Intel Cip

Name of the Vulnerable Software and Affected Versions: IntelR CIP software versions prior to 2.4.10852 Description: The issue is related to insecure inherited permissions in IntelR CIP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8808 · Intel · Intel Server M20Ntp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server M20NTP Family affected versions not specified Description: The issue is related to improper access control in the UEFI firmware, which may allow a privileged user to potentially enable information disclosure via local access. Th...

PT-2024-8842 · Intel · Intel(R) Fortran Compiler Classic

Name of the Vulnerable Software and Affected Versions: IntelR Fortran Compiler Classic versions prior to 2021.13 Description: The issue is related to an uncontrolled search path in some IntelR Fortran Compiler Classic software, which may allow an authenticated user to potentially enable escalatio...

PT-2024-8831 · Intel · Intel Granulate

Name of the Vulnerable Software and Affected Versions: IntelR GranulateTM software versions prior to 4.30.1 Description: The issue is related to improper access control in IntelR GranulateTM software, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2024-8809 · Intel · Intel Server M20Ntp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server M20NTP Family UEFI affected versions not specified Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-8838 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: Intel Distribution for Python versions prior to 2024.2 Description: The issue is related to incorrect default permissions in the Intel Distribution for Python software. This can potentially allow an authenticated user to escalate their...

CVE-2024-49560: Improper Neutralization of Special Elements used in a Command

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-48838: Files or Directories Accessible to External Parties

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2024-48837: Execution with Unnecessary Privileges

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-37365: Improper Input Validation

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...

CVE-2024-49558: Improper Privilege Management

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Privilege Management vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...

PT-2024-8768 · Intel · Intel Actm

Name of the Vulnerable Software and Affected Versions: IntelR processors with IntelR ACTM affected versions not specified Description: The issue is related to the exposure of a resource to the wrong sphere in some IntelR processors with IntelR ACTM, which may allow a privileged user to potentiall...