Lucene search
K

31226 matches found

Tenable Nessus
Tenable Nessus
added 2024/11/15 12:0 a.m.4 views

Beckhoff TwinCAT Package Manager Installed (Windows)

Binary data beckhofftwincatpackagemanagerwininstalled.nbin...

7.3AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2024/11/15 12:0 a.m.2 views

Siemens Solid Edge Installed (Windows)

Binary data siemenssolidedgewininstalled.nbin...

7.3AI score
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/11/15 12:0 a.m.5 views

The software for configuring, monitoring, and controlling industrial equipment, Easergy Studio, has vulnerabilities related to insecure management of privileges. This allows attackers to escalate their privileges.

The vulnerability of the Easergy Studio software for configuring, monitoring, and controlling industrial equipment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges by modifying binary data...

7.8CVSS5.5AI score0.00172EPSS
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2024/11/14 6:13 p.m.280 views

Low: Red Hat Security Advisory: binutils security update

An update for binutils is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CV...

9.8CVSS6.9AI score0.04505EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.4 views

The vulnerability in the `TracePluginImpl::writePacket` method of the `TracePluginImpl.cpp` module of the “Red Database” database management system allows a hacker to perform operations without being recorded in the audit log.

The vulnerability of the TracePluginImpl::writePacket method in the TracePluginImpl.cpp module of the “Red Database” database management system is related to the use of binary auditing when the cancelonerror parameter is enabled. Exploiting this vulnerability allows a remote attacker to even canc...

3.5CVSS5.5AI score
Exploits0References1Affected Software1
OSV
OSV
added 2024/11/14 12:0 a.m.13 views

ALSA-2024:9689 Low: binutils security update

The binutils packages provide a collection of binary utilities for the manipulation of object code in various object file formats. It includes the ar, as, gprof, ld, nm, objcopy, objdump, ranlib, readelf, size, strings, strip, and addr2line utilities. Security Fixes: binutils: heap-based buffer...

9.8CVSS7.5AI score0.04505EPSS
Exploits1References4
BDU FSTEC
BDU FSTEC
added 2024/11/14 12:0 a.m.2 views

The vulnerability of the BinaryStreamDriver component in the Java library for converting objects to XML or JSON format, XStream. This vulnerability allows an attacker to perform a “denial-of-service” attack.

The vulnerability of the BinaryStreamDriver component in the Java library for converting objects to XML or JSON format, XStream, is related to buffer overflows in the stack of the manipulated binary input stream. Exploiting this vulnerability could allow a remote attacker to execute a...

7.8CVSS6.8AI score0.02015EPSS
Exploits0References7Affected Software2
NVD
NVD
added 2024/11/13 9:15 p.m.8 views

CVE-2024-25647

Incorrect default permissions for some IntelR Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00144EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/13 9:8 p.m.14 views

CVE-2024-23312

Uncontrolled search path for some IntelR Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS0.00175EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 9:8 p.m.36 views

CVE-2024-23312

The CVE-2024-23312 issue affects Intel® Binary Configuration Tool (BCT) for Windows prior to version 3.4.5. The root cause is an uncontrolled search path element, which could allow an authenticated local attacker to escalate privileges. Publicly documented impact in connected sources confirms loc...

6.7CVSS6.8AI score0.00175EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/11/13 9:8 p.m.8 views

CVE-2024-23312

Uncontrolled search path for some IntelR Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.00175EPSS
Exploits0References1
CVE
CVE
added 2024/11/13 9:8 p.m.40 views

CVE-2024-25647

CVE-2024-25647 affects the Intel® Binary Configuration Tool for Windows, prior to v3.4.5. The root cause is incorrect default permissions that may allow an authenticated user with local access to escalate privileges. The advisory reports a CVSSv3.1 base score of 6.7 (LOCAL, HIGH impact on confide...

6.7CVSS6.9AI score0.00144EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.3 views

Intel Binary Configuration Tool 安全漏洞

Intel Binary Configuration Tool is a utility program from Intel Corporation that is used to change configuration settings embedded in Intel FSP Firmware Support Package binaries. A security vulnerability exists in Intel Binary Configuration Tool versions prior to 3.4.5 that stems from incorrect...

6.7CVSS6.5AI score0.00144EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/11/13 12:0 a.m.1 views

Intel Binary Configuration Tool 代码问题漏洞

Intel Binary Configuration Tool is an Intel Corporation utility program for changing configuration settings embedded in Intel FSP Firmware Support Package binaries. A code issue vulnerability exists in Intel Binary Configuration Tool versions prior to 3.4.5 that stems from an uncontrolled search...

6.7CVSS6.8AI score0.00175EPSS
Exploits0References2
NVD
NVD
added 2024/11/12 4:15 p.m.15 views

CVE-2024-47906

Excessive binary privileges in Ivanti Connect Secure before version 22.7R2.3 Not Applicable to 9.1Rx and Ivanti Policy Secure before version 22.7R1.2 Not Applicable to 9.1Rx allows a local authenticated attacker to escalate privileges...

7.8CVSS0.00222EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2024/11/12 10:28 a.m.1 views

encoding/gob: golang: Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion

A flaw was found in the encoding/gob package of the Golang standard library. Calling Decoder.Decoding, a message that contains deeply nested structures, can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635...

7.5CVSS6.6AI score0.01127EPSS
Exploits0References8
CNNVD
CNNVD
added 2024/11/12 12:0 a.m.1 views

Ivanti Connect Secure 安全漏洞

Ivanti Connect Secure is a secure remote network connection tool from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Connect Secure that stems from the inclusion of an excessive binary privilege vulnerability...

7.8CVSS8.6AI score0.00222EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.2 views

PT-2024-8686 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable...

6.7CVSS7.4AI score0.00175EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 2024/11/12 12:0 a.m.3 views

PT-2024-8685 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to incorrect default permissions in the Intel Binary Configuration Tool software for Windows, which may allow an authenticated user to potentially enabl...

6.7CVSS7.3AI score0.00144EPSS
Exploits0References5
Intel
Intel
added 2024/11/12 12:0 a.m.6 views

Intel® Binary Configuration Tool Software Advisory

Summary: Potential security vulnerabilities in some Intel® Binary Configuration Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-25647 Description: Incorrect default permissions...

6.7CVSS7.3AI score0.00175EPSS
Exploits0
Rows per page
Query Builder