6021 matches found
PT-2024-2095 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to authenticated command injection vulnerabilities in the ArubaOS command line interface. These vulnerabilities can be exploited to execute arbitrary commands as a...
PT-2024-2131 · Aruba · Arubaos
Name of the Vulnerable Software and Affected Versions: ArubaOS affected versions not specified Description: The issue is related to authenticated command injection vulnerabilities in the ArubaOS command line interface. Successful exploitation of these vulnerabilities results in the ability to...
CVE-2022-43880
IBM QRadar WinCollect Agent 10.0 through 10.1.2 could allow a privileged user to cause a denial of service. IBM X-Force ID: 240151...
PT-2024-13618 · Dell · Dell Platform Bios
Name of the Vulnerable Software and Affected Versions: Dell Platform BIOS affected versions not specified Description: The issue is related to an Improper Null Termination, which could allow a high privilege user with network access to send malicious data and cause some services to cease...
CentOS 9 : gcc-toolset-13-binutils-2.40-8.el9
The remote CentOS Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the gcc-toolset-13-binutils-2.40-8.el9 build changelog. - GNU binutils gold gold v1.11-v1.16 GNU binutils v2.21-v2.31.1 is affected by: Improper Input Validation, Signed/Unsigned...
CVE-2024-0550
A user who is privileged already manager or admin can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files. The attacker would have to have been granted privileged permissions to the system before executing this attack...
Design/Logic Flaw
A user who is privileged already manager or admin can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files. The attacker would have to have been granted privileged permissions to the system before executing this attack...
CVE-2024-0550 Privileged User using traversal to read system files
A user who is privileged already manager or admin can set their profile picture via the frontend API using a relative filepath to then user the PFP GET API to download any valid files. The attacker would have to have been granted privileged permissions to the system before executing this attack...
PT-2024-6473 · Intel · Intel Data Center Gpu Max Series
Name of the Vulnerable Software and Affected Versions: Intel Data Center GPU Max Series versions 1100 and 1550 Description: The issue is related to insufficient checking of unusual or exceptional states in the Intel Data Center GPU Max, which may allow a privileged user to potentially cause a...
CVE-2021-33158
Improper neutralization in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-50955
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777...
CVE-2023-50955 IBM InfoSphere Information Server information disclosure
IBM InfoSphere Information Server 11.7 could allow an authenticated privileged user to obtain the absolute path of the web server installation which could aid in further attacks against the system. IBM X-Force ID: 275777...
IBM InfoSphere Information Server Security Vulnerability
IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A security vulnerability exists in IBM InfoSphere Information Server version 11.7 that originate...
Security Bulletin: IBM InfoSphere Information Server is affected by an information disclosure vulnerability (CVE-2023-50955)
Summary An information disclosure vulnerability in IBM InfoSphere Information Server was addressed. Vulnerability Details CVEID:CVE-2023-50955 DESCRIPTION: IBM InfoSphere Information Server could allow an authenticated privileged user to obtain the absolute path of the web server installation whi...
mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2023)
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...
CVE-2024-21984
StorageGRID formerly StorageGRID Webscale versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting XSS vulnerability. Successful exploit requires the attacker to know specific information about the target instance and trick a privileged user into clicking a...
CVE-2024-25083
An issue was discovered in BeyondTrust Privilege Management for Windows before 24.1. When an low-privileged user initiates a repair, there is an attack vector through which the user is able to execute any program with elevated privileges...
CVE-2023-41090
Race condition in some IntelR MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access...