CVE-2024-29083

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21820

CVE-2024-21820 describes incorrect default permissions in some Intel Xeon processor memory controller configurations when using Intel SGX, potentially allowing a local privileged escalation. Connected sources confirm this item is addressed via microcode updates (intel-microcode) across distributi...

CVE-2024-21820

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-35201: Incorrect Default Permissions

Incorrect default permissions in the IntelR SDP Tool for Windows software all versions may allow an authenticated user to enable escalation of privilege via local access...

CVE-2024-29083: Incorrect Default Permissions

Incorrect default permissions in some IntelR Distribution for Python software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8814 · Intel · Intel Sdp Tool For Windows

Name of the Vulnerable Software and Affected Versions: IntelR SDP Tool for Windows affected versions not specified Description: The issue is related to incorrect default permissions in the IntelR SDP Tool for Windows software, which may allow an authenticated user to enable escalation of privileg...

CVE-2024-25647: Incorrect Default Permissions

Incorrect default permissions for some IntelR Binary Configuration Tool software for Windows before version 3.4.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-49504: Incorrect Default Permissions

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-52551: Incorrect Default Permissions

Jenkins Pipeline: Declarative Plugin 2.2214.vbb34b2ea9b83 and earlier does not check whether the main Jenkinsfile script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous build whose Jenkinsfile script is no longer...

Intel SDP Tool 安全漏洞

Intel SDP Tool is a server debugging and configuration tool from Intel Corporation USA. A security vulnerability exists in Intel SDP Tool that stems from incorrect default permissions. An attacker can exploit the vulnerability to elevate privileges...

Palo Alto Expedition 1.2.91 Remote Code Execution

class MetasploitModule 'Palo Alto Expedition Remote Code Execution CVE-2024-5910 and CVE-2024-9464', 'Description' = %q Obtain remote code execution in Palo Alto Expedition version 1.2.91 and below. The first vulnerability, CVE-2024-5910, allows to reset the password of the admin user, and the...

Intel Binary Configuration Tool 安全漏洞

Intel Binary Configuration Tool is a utility program from Intel Corporation that is used to change configuration settings embedded in Intel FSP Firmware Support Package binaries. A security vulnerability exists in Intel Binary Configuration Tool versions prior to 3.4.5 that stems from incorrect...

Intel SGX SDK 安全漏洞

Intel SGX SDK is a set of software development kits based on SGX Intel Software Security Extensions technology from Intel Corporation USA. A security vulnerability exists in Intel SGX SDK that stems from incorrect default privilege settings. An attacker can exploit the vulnerability to elevate...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21958

Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21957

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21945

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21939

Incorrect default permissions in the AMD Cloud Manageability Service ACMS Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21945

Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...