Lucene search
+L

62 matches found

CNVD
CNVD
•added 2019/01/14 12:00 a.m.•31 views

Intel SGX SDK and SGX Platform Software Elevation of Privilege Vulnerability

Intel SGX SDK and SGX Platform Software are both products of Intel Corporation, Intel SGX SDK is a software development kit based on SGX Intel Software Security Extensions technology, and SGX Platform Software is a software protection extension platform. A security vulnerability exists in Intel S...

7.3CVSS6.8AI score0.00278EPSS
SaveExploits2References1
OSV
OSV
•added 2019/01/10 8:29 p.m.•13 views

CVE-2018-18098

Improper file verification in install routine for IntelR SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access...

7.3CVSS5.8AI score0.00278EPSS
SaveExploits2References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/10 12:00 a.m.•8 views

CVE-2018-18098: Incorrect Permission Assignment for Critical Resource

Improper file verification in install routine for IntelR SGX SDK and Platform Software for Windows before 2.2.100 may allow an escalation of privilege via local access...

7.3CVSS5.8AI score0.00278EPSS
SaveExploits2References2
Lenovo
Lenovo
•added 2018/10/16 12:02 p.m.•79 views

Intel Software Guard Extensions (SGX) Vulnerabilities - Lenovo Support US

No description provided...

8.8CVSS6.9AI score0.60631EPSS
SaveExploits3
Prion
Prion
•added 2018/10/05 2:29 p.m.•29 views

Authorization

A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to a lack of proper input and authorization of HTTP requests. An attacker could exploit...

5CVSS5.2AI score0.01116EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/10/05 12:00 a.m.•8 views

CVE-2018-15429: Improper Input Validation

A vulnerability in the web-based UI of Cisco HyperFlex HX Data Platform Software could allow an unauthenticated, remote attacker to access sensitive information on an affected system. The vulnerability is due to a lack of proper input and authorization of HTTP requests. An attacker could exploit...

5.3CVSS6AI score0.01116EPSS
SaveExploits0References3
Lenovo
Lenovo
•added 2018/08/22 6:58 p.m.•766 views

Intel Software Guard Extensions (SGX) Vulnerabilities - US

Lenovo Security Advisory: LEN-21284 Potential Impact: Elevation of privilege, information disclosure Severity: High Scope of Impact: Industry-wide CVE Identifier: CVE-2017-5736, CVE-2018-3626, CVE-2018-3639, CVE-2018-3640, CVE-2018-3691 Summary Description: Intel has issued several advisories...

7.2CVSS6.9AI score0.60631EPSS
SaveExploits3
CNVD
CNVD
•added 2018/06/20 12:00 a.m.•27 views

IBM Netezza Platform Software Local Elevation of Privilege Vulnerability

IBM Netezza Platform Software is an integrated data system from IBM that is based on InfoSphere Smart Analytics technology and responds to real-time decision making, fraud detection and other needs. A security vulnerability exists in IBM Netezza Platform Software versions 7.0.4 through 7.2.1.6. A...

8.4CVSS8.2AI score0.00565EPSS
SaveExploits1References1
OSV
OSV
•added 2018/06/15 2:29 p.m.•12 views

CVE-2018-1460

IBM Netezza Platform Software IBM PureData System for Analytics 1.0.0 could allow a local user to modify a world writable file, which could be used to execute commands as root. IBM X-Force ID: 140211...

7.8CVSS5.9AI score0.00565EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/15 12:00 a.m.•3 views

CVE-2018-1460: Improper Privilege Management

IBM Netezza Platform Software IBM PureData System for Analytics 1.0.0 could allow a local user to modify a world writable file, which could be used to execute commands as root. IBM X-Force ID: 140211...

8.4CVSS7.7AI score0.00565EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/03 12:00 a.m.•4 views

CVE-2018-3689: Undefined Security Weakness

AESM daemon in Intel Software Guard Extensions Platform Software Component for Linux before 2.1.102 can effectively be disabled by a local attacker creating a denial of services like remote attestation provided by the AESM...

5.5CVSS6AI score0.00238EPSS
SaveExploits0References1
OSV
OSV
•added 2018/03/20 8:29 p.m.•25 views

CVE-2017-5736

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

8.8CVSS7.6AI score0.00328EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/03/20 12:00 a.m.•5 views

CVE-2017-5736: Improper Privilege Management

An elevation of privilege in Intel Software Guard Extensions Platform Software Component before 1.9.105.42329 allows a local attacker to execute arbitrary code as administrator...

8.8CVSS8.3AI score0.00328EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2018/03/01 12:00 a.m.•17 views

The vulnerability of the dnd.jsf component in the HPE Intelligent Management Center PLAT software platform allows a hacker to execute arbitrary code.

The vulnerability of the dnd.jsf component in the HPE Intelligent Management Center PLAT software platform is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using the actionInput parameter...

9CVSS8.1AI score0.05614EPSS
SaveExploits0References5
CNVD
CNVD
•added 2017/10/19 12:00 a.m.•15 views

Huawei FusionSphere OpenStack Elevation of Privilege Vulnerability

Huawei FusionSphere and FusionSphere OpenStack FSO are both Huawei products. The former is a cloud operating system product developed based on the OpenStack framework, and the latter is FusionSphere's cloud platform software in ICT scenarios. An elevation of privilege vulnerability exists in Huaw...

7.2CVSS7.2AI score0.00537EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/07/04 12:00 a.m.•5 views

CVE-2015-4196: Undefined Security Weakness

Platform Software before 4.4.5 in Cisco Unified Communications Domain Manager CDM 8.x has a hardcoded password for a privileged account, which allows remote attackers to obtain root access by leveraging knowledge of this password and entering it in an SSH session, aka Bug ID CSCuq45546...

5CVSS5.8AI score0.01948EPSS
SaveExploits0References2
Cisco
Cisco
•added 2015/07/01 4:00 p.m.•58 views

Cisco Unified Communications Domain Manager Default Static Privileged Account Credentials

A vulnerability in the Cisco Unified Communications Domain Manager Platform Software could allow an unauthenticated, remote attacker to login with the privileges of the root user and take full control of the affected system. The vulnerability occurs because a privileged account has a default and...

10CVSS6.7AI score0.01948EPSS
SaveExploits0References1
CVE
CVE
•added 2015/01/10 2:00 a.m.•67 views

CVE-2014-8020

CVE-2014-8020 affects Cisco Unified Communications Domain Manager Platform Software. The issue allows unauthenticated remote attackers to cause high CPU utilization and degraded performance or service outage by sending a flood of malformed TCP/UDP packets (Bug ID CSCup25276). Cisco’s advisory not...

5CVSS6.9AI score0.02374EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2015/01/10 12:00 a.m.•6 views

CVE-2014-8020: Undefined Security Weakness

Cisco Unified Communication Domain Manager Platform Software allows remote attackers to cause a denial of service CPU consumption, and performance degradation or service outage via a flood of malformed TCP packets and UDP packets, aka Bug ID CSCup25276...

5CVSS5.8AI score0.02374EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/09/24 12:00 a.m.•3 views

CVE-2014-3380: Undefined Security Weakness

Cisco Unified Communications Domain Manager Platform Software 4.4.3 and earlier allows remote attackers to cause a denial of service CPU consumption by sending crafted TCP packets quickly, aka Bug ID CSCuo42063...

5CVSS5.8AI score0.03268EPSS
SaveExploits0References2
Rows per page
Query Builder