CVE-2021-33157

Insufficient control flow management in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-33161

Improper input validation in some IntelR Ethernet Adapters and IntelR Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-27504

Improper conditions check in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28402

Improper input validation in some IntelR BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28402

The CVE-2023-28402 entry relates to Intel BIOS Guard firmware (and PPAM per Intel advisory) with improper input validation that could allow a privileged user to escalate privileges via local access. Affected are Intel BIOS Guard/PPAM firmware across multiple CPU generations; CVSSv3.1 base score 7...

CVE-2023-47855

CVE-2023-47855 involves improper input validation in some Intel(R) TDX module software prior to 1.5.05.46.698, potentially enabling privilege escalation for a local attacker. The vulnerability is cited across multiple advisories (Intel security advisory, vendor/Tencent/Tenable notes) and is tied ...

CVE-2023-45745

Improper input validation in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-45745

Improper input validation in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-45745

CVE-2023-45745 (Intel TDX module) - details from connected Intel advisory : The issue is an improper input validation in Intel® Trust Domain Extensions (TDX) module software before version 1.5.05.46.698, which may allow a privileged local user to escalate privileges. Affected product: Intel TDX m...

CVE-2023-47165

Improper conditions check in the IntelR Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enable denial of service via local access...

CVE-2024-23980

Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some IntelR Server D50FCP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-24981

The CVE-2024-24981 issue affects Intel Server M50FCP Family UEFI firmware, specifically the PfrSmiUpdateFw driver, where improper input validation may enable privilege escalation via local access. Reported by multiple sources (NVD/Red Hat/CVE listings) with a CVSS v3.1 base score of 7.5 (High), l...

CVE-2024-22382

Improper input validation in PprRequestLog module in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...

CVE-2024-22382

CVE-2024-22382 affects Intel® Server D50DNP Family UEFI firmware (PprRequestLog module). The issue is improper input validation that may allow a locally privileged user to escalate privileges. Impact is described as local privilege escalation with high impact (CVSSv3.1: AV:L/AC:H/PR:H/UI:N/S:C/C:...

CVE-2023-47717

IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690...

K000139652: Intel CPU vulnerability CVE-2023-23583

Security Advisory Description Sequence of processor instructions leads to unexpected behavior for some IntelR Processors may allow an authenticated user to potentially enable escalation of privilege and/or information disclosure and/or denial of service via local access. CVE-2023-23583 Impact Thi...

CVE-2023-47717 IBM Security Guardium denial of service

IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690...

CVE-2024-27260

IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985...

CVE-2024-4843

CVE-2024-4843 affects Trellix ePolicy Orchestrator (ePO). Publicly cited documents describe insecure direct object references that let a least-privileged user manipulate client tasks and client task assignments, enabling privilege escalation. The NVD/NVD-derived entries describe impact as insuffi...

PT-2024-4808 · Ibm · Ibm Security Guardium

Name of the Vulnerable Software and Affected Versions: IBM Security Guardium version 12.0 Description: The issue is related to an uncontrolled consumption of resources, which could allow a privileged user to perform unauthorized actions, potentially leading to a denial of service. This could put...