K000148833: Intel Processor (SPP) vulnerabilities CVE-2024-36242 and CVE-2024-38660

Security Advisory Description CVE-2024-36242 Protection mechanism failure in the SPP for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege via local access. CVE-2024-38660 Protection mechanism failure in the SPP for some IntelR XeonR processor...

CVE-2024-25036 IBM Cognos Controller authentication bypass

IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields...

SUSE CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

PT-2024-20712 · Ibm · Ibm Cognos Controller

Name of the Vulnerable Software and Affected Versions: IBM Cognos Controller versions 11.0.0 through 11.0.1 Description: The issue could allow an authenticated user with local access to bypass security, enabling users to circumvent restrictions imposed on input fields. Recommendations: For versio...

MGASA-2024-0377 Updated microcode packages fix security vulnerabilities

Improper Finite State Machines FSMs in the Hardware logic in some 4th and 5th Generation Intel® Xeon® Processors may allow an authorized user to potentially enable denial of service via local access. CVE-2024-21853 Improper conditions check in some Intel® Xeon® processor memory controller...

Oracle Linux 9 : edk2 (ELSA-2024-12842)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12842 advisory. - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division- By-Zero due to a UNIT32 overflow via local...

Zoom Apps for macOS < 6.1.5 Informatioon Disclosure (ZSB-24039)

The version of Zoom Workplace Desktop App for macOS installed on the remote host is prior to 6.1.5. It is, therefore, affected by an informatioon disclosure vulnerability as referenced in the ZSB-24039 advisory: - Uncontrolled resource consumption in the installer for some Zoom apps for macOS...

CVE-2024-7235

AVG AntiVirus Free Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the target system in...

CVE-2024-6233

Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged...

K000148691: qt vulnerabilities CVE-2022-25634 and CVE-2020-0570

Security Advisory Description CVE-2022-25634 Qt through 5.15.8 and 6.x through 6.2.3 can load system library files from an unintended working directory. CVE-2020-0570 Uncontrolled search path in the QT Library before 5.14.0, 5.12.7 and 5.9.10 may allow an authenticated user to potentially enable...

CVE-2024-38296

Dell Edge Gateway 3200 (pre-15.40.30.2879) and Edge Gateway 5200 (pre-12.0.94.2380) are affected by CVE-2024-38296, described as an Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution. The vulnerability can allow a high-privilege, local attacker to...

K000148650: Intel processor vulnerabilities CVE-2024-22185 and CVE-2024-24985

Security Advisory Description CVE-2024-22185 Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-24985 Exposure of resource to wrong sphere in some IntelR processor...

VulnCheck KEV: CVE-2023-28711

Insufficient control flow management in the Hyperscan Library maintained by IntelR before version 5.4.1 may allow an authenticated user to potentially enable denial of service via local access...

K000148608: Intel Xeon vulnerability CVE-2024-21820

Security Advisory Description Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-21820 Impact There is no impact; F5 products are n...

K000148582: Intel Server Board vulnerabilities CVE-2024-31154, CVE-2024-31158, CVE-2024-39609, CVE-2024-40885, and CVE-2024-41167

Security Advisory Description CVE-2024-31154 Improper input validation in UEFI firmware for some IntelR Server S2600BPBR may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-31158 Improper input validation in UEFI firmware in some IntelR Server Boar...

Dell SmartFabric OS10 Unauthorized Access Vulnerability

Dell SmartFabric OS10 is a Linux-based network switch operating system from Dell Dell. An unauthorized access vulnerability exists in Dell SmartFabric OS10, which arises from a file or directory issue that contains a file or directory that is accessible to an outside party. A low-privileged...

K000148584: Intel Xeon Processor vulnerability CVE-2024-23918

Security Advisory Description Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-23918 Impact There is no impact; F5 products are not...

HPE Cray Data Virtualization Service(DVS) 安全漏洞

HPE Cray Data Virtualization Service is a distributed network service from HPE. A security vulnerability exists in HPE Cray Data Virtualization Service DVS that stems from vulnerability to unauthorized local or clustered access...

Hewlett Packard Enterprise Data Management Framework 安全漏洞

Hewlett Packard Enterprise Data Management Framework HPE DMF is a data management framework from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise Data Management Framework that stems from vulnerability to unauthorized access locally or in a cluster...

SUSE CVE-2024-23918

Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...