CVE-2024-21957: Incorrect Default Permissions

Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

CVE-2024-21938: Incorrect Default Permissions

Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

CVE-2024-21937: Incorrect Default Permissions

Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

AMD Ryzen Master 安全漏洞

AMD Ryzen Master is a software tool from UltraMicroelectronics AMD for managing and tuning the performance of AMD Ryzen processors. AMD Ryzen Master has a security vulnerability that stems from incorrect default permissions. An attacker exploiting this vulnerability could achieve elevation of...

Ryzen™ Master Monitoring SDK & AMD Ryzen™ Master Utility Incorrect Default Permission Vulnerabilities

Bulletin ID: AMD-SB-9004 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary The AMD Ryzen™ Master Monitoring SDK is a public distribution that is designed to allow software developers to add processor and memory functions to their own utilities...

PT-2024-19121 · Microsoft +1 · System Center Configuration Manager +1

Name of the Vulnerable Software and Affected Versions: AMD Management Plugin for Microsoft System Center Configuration Manager SCCM versions prior to 7.0.0.1318 Description: The issue is related to incorrect default permissions in the AMD Management Plugin for the Microsoft System Center...

AMD Ryzen Master 安全漏洞

AMD Ryzen Master is a software tool from UltraMicroelectronics AMD for managing and tuning the performance of AMD Ryzen processors. AMD Ryzen Master has a security vulnerability that stems from incorrect default permissions. An attacker exploiting this vulnerability could achieve elevation of...

CVE-2024-21946: Incorrect Default Permissions

Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution...

AMD Management Console Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9003 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within AMD Management Console Software. AMD Management Console AMC is a GUI-based manageability...

AMD Management Plugin for SCCM Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9005 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary An incorrect default permissions vulnerability is identified within the AMD Management Plugin for the Microsoft® System Center Configuration Manager SCCM. The plugin is...

PT-2024-8838 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: Intel Distribution for Python versions prior to 2024.2 Description: The issue is related to incorrect default permissions in the Intel Distribution for Python software. This can potentially allow an authenticated user to escalate their...

PT-2024-19123 · Amd · Amd Ryzen Master

Name of the Vulnerable Software and Affected Versions: AMD Ryzen Master affected versions not specified Description: The issue is related to incorrect default permissions in the AMD Ryzen Master monitoring SDK installation directory. This could allow an attacker to achieve privilege escalation,...

PT-2024-8685 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to incorrect default permissions in the Intel Binary Configuration Tool software for Windows, which may allow an authenticated user to potentially enabl...

AMD Cloud Manageability Service Incorrect Default Permissions Vulnerability

Bulletin ID: AMD-SB-9006 Potential Impact: Incorrect Default Permissions Leading to Arbitrary Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within the AMD Cloud Manageability Service ACMS Software. ACMS is designed to help enable IT...

PT-2024-19126 · Amd · Management Console

Name of the Vulnerable Software and Affected Versions: AMD Management Console affected versions not specified Description: The issue is related to incorrect default permissions in the AMD Management Console installation directory, which could allow an attacker to achieve privilege escalation,...

CVE-2024-11067

The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through...

CVE-2024-11067

The CVE-2024-11067 entry concerns the D-Link DSL6740C modem/router. Affected component: path traversal vulnerability in the device’s resource/file handling that allows unauthenticated remote attackers to read arbitrary system files. Underlying cause: improper filtering of path elements leading to...

CVE-2024-11067 D-Link DSL6740C - Arbitrary File Reading through Path Traversal

The D-Link DSL6740C modem has a Path Traversal Vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files. Additionally, since the device's default password is a combination of the MAC address, attackers can obtain the MAC address through...

DS Browsers allvideo.downloader.browser 安全漏洞

DS Browsers allvideo.downloader.browser DS Browsers Fast Video Downloader: Browser is a video downloader from DS Browsers. A security vulnerability exists in DS Browsers allvideo.downloader.browser Fast Video Downloader: Browser version 1.6-RC1 and earlier versions. An attacker can exploit this...

CVE-2024-50588

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enabl...