CVE-2024-34787

Path traversal in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November Security Update allows a local unauthenticated attacker to achieve code execution. User interaction is required...

PT-2024-24607 · Intel · Intel Ema

Name of the Vulnerable Software and Affected Versions: IntelR EMA software versions prior to 1.13.1.0 Description: The issue is related to improper access control in IntelR EMA software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-26925 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: A protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendation...

PT-2024-19093 · Intel · Intel(R) Tdx Seamldr Module

Name of the Vulnerable Software and Affected Versions: IntelR TDX Seamldr module software versions prior to 1.5.02.00 Description: Sensitive information in a resource is not removed before reuse in some IntelR TDX Seamldr module software, which may allow a privileged user to potentially enable...

PT-2024-19095

Name of the Vulnerable Software and Affected Versions Intel Xeon Processors versions 4th and 5th Generation Description The issue is related to improper finite state machines FSMs in the hardware logic of some Intel Xeon Processors. This could potentially allow an authorized user to enable denial...

PT-2024-28110 · Intel · Intel Quartus Prime Standard Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Standard Edition software for Windows versions prior to 23.1.1 Description: The issue is related to an uncontrolled search path in some versions of the IntelR QuartusR Prime Standard Edition software for Windows. This ma...

PT-2024-25650 · Intel · Intel Graphics Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers affected versions not specified Description: The issue is related to an untrusted pointer dereference in some IntelR Graphics Drivers, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2024-21007 · Intel · Intel Xeon Processors

Name of the Vulnerable Software and Affected Versions: IntelR XeonR Processors affected versions not specified Description: The issue is related to insufficient control flow management in UEFI firmware, which may allow an authenticated user to enable denial of service via local access...

PT-2024-22640 · Intel · Intel Ipp

Name of the Vulnerable Software and Affected Versions: IntelR IPP software for Windows versions prior to 2021.12.0 Description: The issue is related to an uncontrolled search path in some IntelR IPP software for Windows, which may allow an authenticated user to potentially enable escalation of...

PT-2024-24752 · Opencl · Opencl

Name of the Vulnerable Software and Affected Versions: OpenCLTM affected versions not specified Description: The issue is related to an out-of-bounds read in some OpenCLTM software, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At...

CVE-2024-8539

Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files...

CVE-2024-37365

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...

CVE-2024-37365

The CVE-2024-37365 entry concerns Rockwell Automation FactoryTalk View ME (Machine Edition). Reports describe a remote code execution path where saving projects in the public directory allows a local attacker to modify/delete files and potentially escalate privileges by altering macros to execute...

CVE-2024-49557

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code...

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-48838

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2024-48838

Dell SmartFabric OS10 vulnerability CVE-2024-48838 affects OS10: Dell SmartFabric OS10 Software versions 10.5.3.x–10.5.6.x. The issue is described as files or directories accessible to external parties, enabling a low-privileged, locally authenticated attacker to potentially gain filesystem acces...

CVE-2024-48837

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...