Lucene search
+L

20871 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•3 views

CVE-2024-25565: Insufficient Control Flow Management

Insufficient control flow management in UEFI firmware for some IntelR XeonR Processors may allow an authenticated user to enable denial of service via local access...

4.8CVSS5.7AI score0.00175EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•2 views

CVE-2024-37025: Incorrect Execution-Assigned Permissions

Incorrect execution-assigned permissions in some IntelR Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS6.8AI score0.0015EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•2 views

CVE-2024-21820: Incorrect Default Permissions

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...

8.5CVSS7.3AI score0.00216EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•5 views

CVE-2024-27200: Improper Access Control

Improper access control in some IntelR GranulateTM software before version 4.30.1 may allow a authenticated user to potentially enable escalation of privilege via local access...

4.8CVSS5.6AI score0.0015EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•4 views

CVE-2024-34022: Improper Access Control

Improper Access Control in some ThunderboltTM Share software before version 1.0.49.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

6.7CVSS5.8AI score0.00152EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•2 views

CVE-2024-36276: Insecure Inherited Permissions

Insecure inherited permissions for some IntelR CIP software before version 2.4.10852 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS6.8AI score0.00139EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/13 12:00 a.m.•15 views

PT-2024-21007 · Intel · Intel Xeon Processors

Name of the Vulnerable Software and Affected Versions: IntelR XeonR Processors affected versions not specified Description: The issue is related to insufficient control flow management in UEFI firmware, which may allow an authenticated user to enable denial of service via local access...

4.8CVSS6.3AI score0.00175EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/11/13 12:00 a.m.•21 views

PT-2024-24752 · Opencl · Opencl

Name of the Vulnerable Software and Affected Versions: OpenCLTM affected versions not specified Description: The issue is related to an out-of-bounds read in some OpenCLTM software, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: At...

3.9CVSS6.6AI score0.00179EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•3 views

CVE-2024-34776: Out-of-bounds Write

Out-of-bounds write in some IntelR SGX SDK software may allow an authenticated user to potentially enable escalation of privilege via local access...

4.5CVSS5.8AI score0.00147EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/13 12:00 a.m.•4 views

CVE-2024-39285: Improper Access Control

Improper access control in UEFI firmware in some IntelR Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access...

5.6CVSS6AI score0.00148EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/12 5:15 p.m.•15 views

CVE-2024-8539

Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files...

7.1CVSS5.5AI score0.00216EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/12 3:15 p.m.•36 views

CVE-2024-37365

A remote code execution vulnerability exists in the affected product. The vulnerability allows users to save projects within the public directory allowing anyone with local access to modify and/or delete files. Additionally, a malicious user could potentially leverage this vulnerability to escala...

7.8CVSS0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/12 2:52 p.m.•93 views

CVE-2024-37365

The CVE-2024-37365 entry concerns Rockwell Automation FactoryTalk View ME (Machine Edition). Reports describe a remote code execution path where saving projects in the public directory allows a local attacker to modify/delete files and potentially escalate privileges by altering macros to execute...

7.8CVSS7.5AI score0.00225EPSS
SaveExploits0References1Affected Software1
OSV
OSV
•added 2024/11/12 4:15 a.m.•14 views

CVE-2024-49557

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code...

7.8CVSS5.8AI score0.00695EPSS
SaveExploits0References1
OSV
OSV
•added 2024/11/12 4:15 a.m.•16 views

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

7.8CVSS5.8AI score0.00755EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/12 3:36 a.m.•30 views

CVE-2024-48838

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a Files or Directories Accessible to External Parties vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Filesystem access for attacker...

3.3CVSS0.00154EPSS
SaveExploits0References1
CVE
CVE
•added 2024/11/12 3:36 a.m.•71 views

CVE-2024-48838

Dell SmartFabric OS10 vulnerability CVE-2024-48838 affects OS10: Dell SmartFabric OS10 Software versions 10.5.3.x–10.5.6.x. The issue is described as files or directories accessible to external parties, enabling a low-privileged, locally authenticated attacker to potentially gain filesystem acces...

3.3CVSS6.8AI score0.00154EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/12 3:31 a.m.•24 views

CVE-2024-48837

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

7.8CVSS6.9AI score0.002EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/12 3:17 a.m.•10 views

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

7.8CVSS7.2AI score0.00755EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/12 3:17 a.m.•32 views

CVE-2024-49560

Dell SmartFabric OS10 Software, versions 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contains a command injection vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Command execution...

7.8CVSS0.00755EPSS
SaveExploits0References1
Rows per page
Query Builder