5923 matches found
CVE-2023-48366
Race condition in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-21859
Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2023-49615
Improper input validation in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-56463
IBM QRadar SIEM 7.5 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2024-56463
CVE-2024-56463 (IBM QRadar SIEM 7.5) is a cross-site scripting vulnerability that could allow a privileged user to embed arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. The IBM Security Bulletin confirms affected product/version: IBM QRa...
CVE-2022-28132
The T-Soft E-Commerce 4 web application is susceptible to SQL injection SQLi attacks when authenticated as an admin or privileged user. This vulnerability allows attackers to access and manipulate the database through crafted requests. By exploiting this flaw, attackers can bypass authentication...
CVE-2023-6105
An information disclosure vulnerability exists in multiple ManageEngine products that can result in encryption keys being exposed. A low-privileged OS user with access to the host where an affected ManageEngine product is installed can view and use the exposed key to decrypt product database...
SUSE CVE-2024-31068
Improper Finite State Machines FSMs in Hardware Logic for some IntelR Processors may allow privileged user to potentially enable denial of service via local access...
CVE-2024-31157
Improper initialization in UEFI firmware OutOfBandXML module in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-31157
Improper initialization in UEFI firmware OutOfBandXML module in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
DEBIAN-CVE-2024-31157
Improper initialization in UEFI firmware OutOfBandXML module in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
ALPINE-CVE-2024-31068
Improper Finite State Machines FSMs in Hardware Logic for some IntelR Processors may allow privileged user to potentially enable denial of service via local access...
CVE-2024-25571
Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2024-28047
Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-21859
Improper buffer restrictions in the UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
UBUNTU-CVE-2024-28047
Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2024-36262
Race condition in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-49603
CVE-2023-49603 is a race condition in Intel System Security Report and System Resources Defense firmware that could allow a locally privileged user to escalate privileges. The issue is corroborated by multiple sources (Red Hat, NVD, CVE listing, Intel advisory INTEL-SA-01203, and HP security docu...
