Lucene search
+L

1451 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•9 views

CVE-2024-28970: Out-of-bounds Write

Dell Client BIOS contains an Out-of-bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to platform denial of service...

4.7CVSS5.9AI score0.00137EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/17 4:15 p.m.•19 views

CVE-2024-22429

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution...

6.7CVSS6AI score0.00209EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/05/17 12:00 a.m.•8 views

PT-2024-19417

Name of the Vulnerable Software and Affected Versions Dell BIOS affected versions not specified Description The issue is related to an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to...

7.5CVSS0.00209EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/05/17 12:00 a.m.•5 views

CVE-2024-22429: Improper Input Validation

Dell BIOS contains an Improper Input Validation vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to arbitrary code execution...

7.5CVSS6.4AI score0.00209EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/05/16 9:15 p.m.•17 views

CVE-2023-40071

Improper access control in some IntelR GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00205EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/05/10 4:08 a.m.•41 views

Security Bulletin: IBM Sterling Connect:Direct Web Service is vulnerable to multiple vulnerabilities due to IBM Java

Summary IBM Sterling Connect:Direct Web Service uses IBM Java SE. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-20932 DESCRIPTION: An unspecified vulnerability in Java SE related to the Security component could allow a remote...

7.5CVSS6.5AI score0.01035EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2024/05/09 12:00 a.m.•21 views

PT-2024-5327 · Dell · Dell Edge Gateway

Name of the Vulnerable Software and Affected Versions: Dell Edge Gateway BIOS versions 3200 and 5200 Description: The issue is related to an out-of-bounds read vulnerability in the DXE driver of the BIOS firmware of Dell Edge Gateway devices. This vulnerability can be exploited by a local...

6CVSS6.6AI score0.00167EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2024/04/10 8:15 a.m.•21 views

CVE-2024-22448

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

4.4CVSS5.8AI score0.00176EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/04/10 7:30 a.m.•49 views

CVE-2024-22448

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

4.7CVSS4.9AI score0.00176EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/04/10 7:30 a.m.•30 views

CVE-2024-22448

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

4.7CVSS4.6AI score0.00176EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/10 7:30 a.m.•104 views

CVE-2024-22448

CVE-2024-22448 concerns Dell BIOS: an Out-of-Bounds Write vulnerability in Dell BIOS, exploitable by a local, authenticated attacker with admin privileges, causing denial of service. Affected software/tooling is the Dell BIOS on Dell systems; the root cause is an out-of-bounds write in the BIOS c...

4.7CVSS6.4AI score0.00176EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/10 12:00 a.m.•11 views

CVE-2024-22448: Out-of-bounds Write

Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service...

4.7CVSS5.9AI score0.00176EPSS
SaveExploits0References2
Fortinet
Fortinet
•added 2024/04/09 12:00 a.m.•18 views

FortiManager - Code Injection via Jinja Template

...

6.7CVSS6.8AI score0.0027EPSS
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
•added 2024/04/02 8:06 p.m.•70 views

Security Bulletin: IBM Sterling Connect:Direct for UNIX is vulnerable to unspecified vulnerabilities and sensitive information exposure due to IBM Runtime Environment Java Technology Edition Version 8

Summary IBM Java 8 is used by IBM Sterling Connect:Direct for UNIX in product configuration, management, and data transmission. IBM Sterling Connect:Direct for UNIX is impacted by unspecified vulnerabilities and sensitive information exposure due to IBM Java 8. IBM Sterling Connect:Direct for UNI...

7.5CVSS7AI score0.0117EPSS
SaveExploits0Affected Software1
osv_cve
osv_cve
•added 2024/03/27 5:15 p.m.•21 views

CVE-2024-20309

A vulnerability in auxiliary asynchronous port AUX functions of Cisco IOS XE Software could allow an authenticated, local attacker to cause an affected device to reload or stop responding. This vulnerability is due to the incorrect handling of specific ingress traffic when flow control hardware i...

5.5CVSS5.8AI score0.00102EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/03/26 3:18 p.m.•29 views

CVE-2024-25958

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

6.7CVSS6.7AI score0.00127EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•11 views

CVE-2024-25958: Incorrect Default Permissions

Dell Grab for Windows, versions up to and including 5.0.4, contain Weak Application Folder Permissions vulnerability. A local authenticated attacker could potentially exploit this vulnerability, leading to privilege escalation, unauthorized access to application data, unauthorized modification of...

7.8CVSS5.7AI score0.00127EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2024/03/19 1:36 p.m.•73 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM License Metric Tool v9.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8 used by IBM License Metric Tool. These issues were disclosed as part of the IBM Java SDK updates in Jan 2024. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE...

7.5CVSS7.1AI score0.0117EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/03/12 9:21 a.m.•45 views

Security Bulletin: IBM Sterling Connect:Direct File Agent is vulnerable to multiple issues due to IBM Runtime Environment Java Technology Edition

Summary IBM Sterling Connect:Direct File Agent uses IBM Runtime Environment Java Technology Edition, Version 7 and 8. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-20952 DESCRIPTION: An unspecified vulnerability in Java SE related ...

7.5CVSS6.5AI score0.0117EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2024/03/11 4:22 p.m.•37 views

Security Bulletin: There are multiple vulnerabilities in IBM Semeru Runtime and IBM SDK, Java Technology Edition that is shipped with CICS Transaction Gateway for Multiplatforms.

Summary There are multiple vulnerabilities in IBM Semeru Runtime and IBM SDK, Java Technology Edition that is shipped with CICS Transaction Gateway for Multiplatforms. An update to CICS Transaction Gateway for Multiplatforms has been released to address these vulnerabilities. Vulnerability Detail...

7.5CVSS7AI score0.0117EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder