Mautic 安全漏洞

Mautic is an open source marketing automation software from Mautic Open Source. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic 1.0.0-beta2 and earlier versions, which stems from a cross-site scripting issue in the...

CVE-2024-40770

CVE-2024-40770 is a macOS vulnerability describing a permissions issue that could allow a non-privileged user to modify restricted network settings. The vulnerability is addressed in macOS Sequoia 15, per NVD/NVD-derived entries and Apple security content references. Red Hat’s CVE page reiterates...

CVE-2024-40770

A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15. A non-privileged user may be able to modify restricted network settings...

ALPINE-CVE-2024-24968

Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...

ALPINE-CVE-2024-23984

Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

UBUNTU-CVE-2024-24968

Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...

CVE-2023-43753

Improper conditions check in some IntelR Processors with IntelR SGX may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-42772

Untrusted pointer dereference in UEFI firmware for some IntelR reference processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-23984

Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-43753

Improper conditions check in some IntelR Processors with IntelR SGX may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-41833

CVE-2023-41833 is a race condition in Intel UEFI firmware for certain Intel processors that may allow a local attacker to escalate privileges. The issue affects UEFI firmware components rather than a consumer-facing application; root cause is synchronization errors when sharing resources in the f...

CVE-2023-43626

CVE-2023-43626: Improper access control in UEFI firmware for Intel processors may allow a local privileged user to escalate privileges. Root cause: access-control weakness in UEFI implementation. Impact: potential privilege escalation; Intel advisory also notes DoS or information disclosure in so...

CVE-2023-43626

Improper access control in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-21871

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-29032 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions. This issue allows a non-privileged user to modify restricted network settings. Recommendations: For versions prior to 15, update to macOS...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's provide for interpreting computer instructions and processing data in computer software. A security vulnerability exists in Intel Processors that originates from a hardware logic error contained in the finite state machine FSM. The vulnerability...

PT-2024-38910 · Xcc · Xcc

Name of the Vulnerable Software and Affected Versions: XCC affected versions not specified Description: An input validation weakness was discovered that could allow a valid, authenticated user with elevated privileges to perform command injection or cause a recoverable denial of service using a...

WordPress plugin Envira Gallery 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

Citrix Systems Workspace App 安全漏洞

Citrix Systems Workspace App is an application used to provide secure access capabilities to applications, desktops, and data from Citrix Systems USA. A security vulnerability exists in Citrix Systems Workspace App that originates from a local elevation of privilege that allows a low-privileged...

CVE-2024-44117

The RFC enabled function module allows a low privileged user to perform various actions, such as modifying the URLs of any user's favourite nodes and workbook ID. There is low impact on integrity and availability of the application...