Latest CVE Feed
-
8.8
HIGHCVE-2024-41939
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application does not properly enforce authorization checks. This could allow an authenticated attacker to bypass the checks and elevate their privileges on the applicatio... Read more
Affected Products : sinec_nms- Published: Aug. 13, 2024
- Modified: Aug. 14, 2024
-
5.5
MEDIUMCVE-2024-41938
A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS Control web application contains a path traversal vulnerability. This could allow an authenticated attacker it to delete arbitrary cert... Read more
Affected Products : sinec_nms- Published: Aug. 13, 2024
- Modified: Aug. 14, 2024
-
5.4
MEDIUMCVE-2024-41907
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application is missing general HTTP security headers in the web server. This could allow an attacker to make the servers more prone to c... Read more
Affected Products : sinec_traffic_analyzer- Published: Aug. 13, 2024
- Modified: Aug. 14, 2024
-
6.5
MEDIUMCVE-2024-41906
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application does not properly handle cacheable HTTP responses in the web service. This could allow an attacker to read and modify data s... Read more
Affected Products : sinec_traffic_analyzer- Published: Aug. 13, 2024
- Modified: Aug. 14, 2024
-
7.6
HIGHCVE-2024-41905
A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V2.0). The affected application do not have access control for accessing the files. This could allow an authenticated attacker with low privilege's to get a... Read more
Affected Products : sinec_traffic_analyzer- Published: Aug. 13, 2024
- Modified: Aug. 14, 2024
-
6.7
MEDIUMCVE-2024-28953
Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.8
MEDIUMCVE-2024-22374
Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
9.3
CRITICALCVE-2024-21810
Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : ethernet_800_series_controllers_driver- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.7
MEDIUMCVE-2024-23974
Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.7
MEDIUMCVE-2024-22376
Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
7.8
HIGHCVE-2023-42667
Improper isolation in the Intel(R) Core(TM) Ultra Processor stream cache mechanism may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
7.3
HIGHCVE-2024-24853
Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
5.7
MEDIUMCVE-2023-40067
Unchecked return value in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable escalation of privilege via physical access.... Read more
- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.8
MEDIUMCVE-2024-21806
Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access.... Read more
Affected Products : ethernet_800_series_controllers_driver- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.7
MEDIUMCVE-2024-21766
Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : oneapi_math_kernel_library- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.9
MEDIUMCVE-2023-38655
Improper buffer restrictions in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable denial of service via network access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
7.1
HIGHCVE-2024-21787
Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
4.6
MEDIUMCVE-2023-48361
Improper initialization in firmware for some Intel(R) CSME may allow a privileged user to potentially enable information disclosure via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.7
MEDIUMCVE-2024-21769
Uncontrolled search path in some Intel(R) Ethernet Connection I219-LM install software may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024
-
6.7
MEDIUMCVE-2024-25939
Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.... Read more
Affected Products :- Published: Aug. 14, 2024
- Modified: Aug. 14, 2024