PT-2024-19093 · Intel · Intel(R) Tdx Seamldr Module

Name of the Vulnerable Software and Affected Versions: IntelR TDX Seamldr module software versions prior to 1.5.02.00 Description: Sensitive information in a resource is not removed before reuse in some IntelR TDX Seamldr module software, which may allow a privileged user to potentially enable...

PT-2024-19095

Name of the Vulnerable Software and Affected Versions Intel Xeon Processors versions 4th and 5th Generation Description The issue is related to improper finite state machines FSMs in the hardware logic of some Intel Xeon Processors. This could potentially allow an authorized user to enable denial...

PT-2024-28110 · Intel · Intel Quartus Prime Standard Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Standard Edition software for Windows versions prior to 23.1.1 Description: The issue is related to an uncontrolled search path in some versions of the IntelR QuartusR Prime Standard Edition software for Windows. This ma...

PT-2024-25650 · Intel · Intel Graphics Drivers

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers affected versions not specified Description: The issue is related to an untrusted pointer dereference in some IntelR Graphics Drivers, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2024-21007 · Intel · Intel Xeon Processors

Name of the Vulnerable Software and Affected Versions: IntelR XeonR Processors affected versions not specified Description: The issue is related to insufficient control flow management in UEFI firmware, which may allow an authenticated user to enable denial of service via local access...

PT-2024-22640 · Intel · Intel Ipp

Name of the Vulnerable Software and Affected Versions: IntelR IPP software for Windows versions prior to 2021.12.0 Description: The issue is related to an uncontrolled search path in some IntelR IPP software for Windows, which may allow an authenticated user to potentially enable escalation of...

PT-2024-24752 · Opencl · Opencl

Name of the Vulnerable Software and Affected Versions: OpenCLTM affected versions not specified Description: The issue is related to an out-of-bounds read in some OpenCLTM software, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At...

CVE-2024-8539

Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files...

CVE-2024-37365

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...

CVE-2024-37365

The CVE-2024-37365 entry concerns Rockwell Automation FactoryTalk View ME (Machine Edition). Reports describe a remote code execution path where saving projects in the public directory allows a local attacker to modify/delete files and potentially escalate privileges by altering macros to execute...

CVE-2024-49557

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code...

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-48838

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

CVE-2024-48838

Dell SmartFabric OS10 vulnerability CVE-2024-48838 affects OS10: Dell SmartFabric OS10 Software versions 10.5.3.x–10.5.6.x. The issue is described as files or directories accessible to external parties, enabling a low-privileged, locally authenticated attacker to potentially gain filesystem acces...

CVE-2024-48837

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

CVE-2024-49560

Dell SmartFabric OS10 (Debian-based OS10 on Dell PowerSwitch) versions 10.5.3.x–10.5.6.x have a command injection vulnerability caused by insufficient input validation at command execution. A low-privileged, local attacker could exploit this to execute arbitrary commands. Connected sources corrob...

CVE-2024-47588

CVE-2024-47588 affects SAP NetWeaver Java (Software Update Manager 1.1). Under certain upgrade-error conditions, credentials are written in plaintext to a log file, enabling a local attacker (authenticated as a non-administrative user) to exfiltrate credentials from logs. The documented impact is...

CVE-2024-47588 Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...