10871 matches found
kernel: hw:amd:IOMMU improperly handles certain special address leading to a loss of guest integrity
A flaw was found in the way AMD IOMMU handles certain special address ranges with invalid device table entries DTEs, which may allow an attacker with privileges and a compromised Hypervisor to induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest integrity...
kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory
A flaw was found in hw in the SNP-SEV firmware. This flaw could allow a privileged attacker to corrupt a guest's private memory, potentially resulting in the loss of data integrity of the guest...
kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory
A flaw was found in hw in the SNP-SEV firmware. This flaw could allow a privileged attacker to corrupt a guest's private memory, potentially resulting in the loss of data integrity of the guest...
kernel: hw:amd: Incomplete system memory cleanup in SEV firmware corrupt guest private memory
A flaw was found in hw in the SNP-SEV firmware. This flaw could allow a privileged attacker to corrupt a guest's private memory, potentially resulting in the loss of data integrity of the guest...
Infinera hiT 7300 安全漏洞
The Infinera hiT 7300 is a software-defined networking SDN-ready coherent packet-optical transport system from Infinera USA. A security vulnerability exists in the Infinera hiT 7300 version 5.60.50, which originates in a web application that allows a remote privileged attacker to execute an...
CVE-2024-39842
A SQL injection vulnerability in Centreon 24.04.2 allows a remote high-privileged attacker to execute arbitrary SQL command via user massive changes inputs...
Intel Processors 安全漏洞
Intel Processors is an American Intel company that provides interpretation of computer instructions and processing of data in computer software. A security vulnerability exists in Intel Processors, which can be exploited by a privileged attacker to conduct an information disclosure attack via loc...
Intel Processors 安全漏洞
Intel Processors is an American Intel company that provides interpretation of computer instructions and processing of data in computer software. A security vulnerability exists in Intel Processors, which can be exploited by a privileged attacker to conduct a denial-of-service attack via local...
Intel Processors 缓冲区错误漏洞
Intel Processors is an American Intel company that provides the ability to interpret computer instructions and process data in computer software. A buffer error vulnerability exists in Intel Processors, which can be exploited by a privileged attacker to conduct a denial of service attack via loca...
Intel Processors 安全漏洞
Intel Processors is an American Intel company that provides interpretation of computer instructions and processing of data in computer software. A security vulnerability exists in Intel Processors, which can be exploited by a privileged attacker to conduct a privilege escalation attack via local...
Dell Precision Rack BIOS Information Disclosure Vulnerability
Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products from Dell USA. An information disclosure vulnerability exists in the Dell Precision Rack BIOS that originates from accessing a memory location after the end of a buffer. A low-privileged attacker with local acces...
CVE-2024-20430
CVE-2024-20430 affects Cisco Meraki Systems Manager (SM) Agent for Windows. The issue stems from incorrect handling of directory search paths at runtime, enabling an authenticated, local attacker to read and place malicious configuration files and DLLs that are executed when SM launches at startu...
Beckhoff TwinCAT/BSD Authentication Bypass Using an Alternate Path or Channel (CVE-2024-41173)
The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
CVE-2024-43386
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable EMAILNOTIFICATION.TO in mGuard devices...
CVE-2024-43385
A low privileged remote attacker can trigger the execution of arbitrary OS commands as root due to improper neutralization of special elements in the variable PROXYHTTPPORT in mGuard devices...
CVE-2024-39582
Dell PowerScale InsightIQ, version 5.0, contain a Use of hard coded Credentials vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2024-43386
CVE-2024-43386 affects Phoenix Contact mGuard devices (including FL/TC MGUARD) where a low-privileged remote attacker can trigger OS command execution as root via improper neutralization of elements in the EMAIL_NOTIFICATION.TO variable. The issue is rooted in input handling of that field, enabli...
CVE-2024-43385
CVE-2024-43385 affects PHOENIX CONTACT mGuard devices. The vulnerability stems from improper neutralization of a special element in the PROXY_HTTP_PORT variable, enabling a low-privileged remote attacker to trigger arbitrary OS command execution as root. Documents identify the affected component ...
Dell SmartFabric OS10 Command Execution Vulnerability
Dell SmartFabric OS10 is an operating system from Dell for its switch products. A command execution vulnerability exists in Dell SmartFabric OS10. The vulnerability is due to an unsatisfactory neutralization "command injection" vulnerability in the affected version that contains special elements...