CVE-2024-45642

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2024-45099 IBM Security ReaQta cross-site scripting

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

CVE-2024-45099 IBM Security ReaQta cross-site scripting

IBM Security ReaQta 3.12 is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

PT-2024-31430 · Ibm · Ibm Security Reaqta

Name of the Vulnerable Software and Affected Versions: IBM Security ReaQta version 3.12 Description: This issue allows a privileged user to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2024-39811

Improper input validation in firmware for some IntelR Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39609

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31158

Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21850

Sensitive information in resource not removed before reuse in some IntelR TDX Seamldr module software before version 1.5.02.00 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36282

Improper input validation in the IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-36282

CVE-2024-36282 concerns Intel® Server Board S2600ST Family BIOS and Firmware Update software. The vulnerability arises from improper input validation in the update software, allowing a privileged user to potentially escalate privileges via local access. Affected: BIOS and Firmware Update software...

CVE-2024-36482

CVE-2024-36482 : Improper input validation in some Intel® CIP software before version 2.4.10852 may allow a privileged user to escalate privileges via local access. Intel’s advisory (Intel® CIP Software) confirms affected product: Intel® CIP software prior to 2.4.10852. Base/impact metrics from m...

CVE-2024-39285

CVE-2024-39285 describes improper access control in UEFI firmware affecting Intel Server Board families such as M70KLP, M20NTP, M10JNP2SB, and S2600BP(S). The root cause is an access control weakness in the UEFI firmware that may allow a privileged local attacker to disclose sensitive information...

CVE-2024-39609

Improper Access Control in UEFI firmware for some IntelR Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-39811

CVE-2024-39811 affects Intel Server M20NTP Family UEFI firmware. The root cause is improper input validation in the UEFI firmware, which may allow a privileged user to escalate privileges via local access. The vulnerability is documented with local attack vector and high-impact CVSS metrics (3.1:...

CVE-2024-40885

Use after free in the UEFI firmware of some IntelR Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-41167

Summary: CVE-2024-41167 concerns improper input validation in the UEFI firmware of Intel Server Board M10JNP2SB Family, potentially allowing a locally privileged user to escalate privileges. The issue is documented within a broader Intel advisory tier that lists several related CVEs (e.g., CVE-20...

CVE-2024-31158

Improper input validation in UEFI firmware in some IntelR Server Board S2600BP Family may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-22185

Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-25563

Improper initialization in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2024-25563

Improper initialization in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi before version 23.40 may allow a privileged user to potentially enable information disclosure via local access...