CVE-2024-25576

The CVE-2024-25576 entry is validated by concrete details in connected documents: Intel reports an improper access control flaw in the firmware of some Intel Agilex FPGA products (specifically Agilex FPGA 7 firmware) prior to version 24.1, which could allow a privileged user to escalate privilege...

CVE-2024-24853

Incorrect behavior order in transition between executive monitor and SMI transfer monitor STM in some IntelR Processor may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24980

CVE-2024-24980 (Intel Xeon): Protection mechanism failure in some 3rd–5th Gen Xeon processors may allow a privileged user to escalate privileges via local access. The related reports, including Intel advisory intel-sa-01100, indicate the vulnerability impacts protection/memory controller mechanis...

CVE-2024-24980

Protection mechanism failure in some 3rd, 4th, and 5th Generation IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-25939

Mirrored regions with different values in 3rd Generation IntelR XeonR Scalable Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-28947

CVE-2024-28947 relates to Intel® Server Board S2600ST Family firmware prior to 02.01.0017, where improper input validation in the kernel-mode driver can allow a locally privileged user to escalate privileges. Affected product is Intel Server Board S2600ST Family firmware; root cause is input vali...

CVE-2024-28947

Improper input validation in kernel mode driver for some IntelR Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-24853

Incorrect behavior order in transition between executive monitor and SMI transfer monitor STM in some IntelR Processor may allow a privileged user to potentially enable escalation of privilege via local access...

Intel 3rd Generation Intel Xeon Scalable Processors 安全漏洞

Intel 3rd Generation Intel Xeon Scalable Processors are a family of scalable processors from Intel Corporation USA. A security vulnerability exists in Intel 3rd Generation Intel Xeon Scalable Processors that originates from a mirrored region with different values, allowing a privileged user to...

Exploit for CVE-2024-22120

Usage bash python exploit.py --ip --sid --hostid --phps...

CVE-2024-6788

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password...

CVE-2024-6788 Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password...

CVE-2024-6788 Phoenix Contact: update feature from CHARX controller can be used to reset a low privilege user password

A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user “user-app” to the default password...

CVE-2024-41774

IBM Common Licensing 9.0 is vulnerable to stored cross-site scripting. This vulnerability allows a privileged user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 3503...

CVE-2024-41774

IBM Common Licensing 9.0 is affected by CVE-2024-41774: stored cross-site scripting in the Web UI (LKS Administration Reporting Tool/Agent) that could allow a privileged user to inject JavaScript and potentially disclose credentials. Remediation: apply IBM_Common_Licensing_ICL_9.0.0.1 / update to...

PT-2024-7101 · Phoenix Contact · Phoenix Contact Charx Sec-3000

Name of the Vulnerable Software and Affected Versions: Phoenix Contact CHARX SEC-3000 versions up to 1.6.2 Description: A remote unauthenticated attacker can use the firmware update feature on the LAN interface of the device to reset the password for the predefined, low-privileged user user-app t...

PT-2024-7760 · Intel · Intel Amt +1

Name of the Vulnerable Software and Affected Versions: IntelR AMT and IntelR Standard Manageability affected versions not specified Description: The issue is related to improper buffer restrictions in the firmware of some Intel products, which may allow a privileged user to potentially enable...

PT-2024-28684 · Zoom · Zoom Sdks +3

Name of the Vulnerable Software and Affected Versions: Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description: The issue allows a privileged user to conduct an information disclosure via network access. This is a sensitive information disclosur...

PT-2024-7105 · Intel · Intel Converged Security/Manageability Engine

Name of the Vulnerable Software and Affected Versions: Intel Converged Security and Manageability Engine CSME affected versions not specified Description: The issue is related to insufficient input validation in the Intel Converged Security and Manageability Engine CSME firmware, which may allow ...

A flaw was found in the QXL display device emulation in QEMU. A double fetch of guest controlled values `cursor->header.width` and `cursor->header.height` can lead to the allocation of a small cursor object followed by a subsequent heap-based buffer overflow. A malicious privileged guest user could use this flaw to crash the QEMU process on the host or potentially execute arbitrary code within the context of the QEMU process.

...