Show filters
46 Total Results
Displaying 1-10 of 46
Sort by:
Attacker Value
Unknown

CVE-2024-11146

Disclosure Date: January 17, 2025 (last updated February 27, 2025)
TrueFiling is a collaborative, web-based electronic filing system where attorneys, paralegals, court reporters and self-represented filers collect public legal documentation into cases. TrueFiling is an entirely cloud-hosted application. Prior to version 3.1.112.19, TrueFiling trusted some client-controlled identifiers passed in URL requests to retrieve information. Platform users must self-register for an account, and once authenticated, could manipulate those identifiers to gain partial access to case information and the ability to partially change user access to case information. This vulnerability was addressed in version 3.1.112.19 and all instances were updated by 2024-11-08.
0
Attacker Value
Unknown

CVE-2024-39811

Disclosure Date: November 13, 2024 (last updated February 27, 2025)
Improper input validation in firmware for some Intel(R) Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access.
0
Attacker Value
Unknown

CVE-2024-0106

Disclosure Date: November 01, 2024 (last updated February 27, 2025)
NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.
0
Attacker Value
Unknown

CVE-2024-0105

Disclosure Date: November 01, 2024 (last updated February 27, 2025)
NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may lead to denial of service, data tampering, and limited information disclosure.
0
Attacker Value
Unknown

CVE-2024-21871

Disclosure Date: September 16, 2024 (last updated February 26, 2025)
Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
0
Attacker Value
Unknown

CVE-2024-21781

Disclosure Date: September 16, 2024 (last updated February 26, 2025)
Improper input validation in UEFI firmware for some Intel(R) Processors may allow a privileged user to enable information disclosure or denial of service via local access.
0
Attacker Value
Unknown

CVE-2023-43626

Disclosure Date: September 16, 2024 (last updated February 26, 2025)
Improper access control in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
0
Attacker Value
Unknown

CVE-2023-42772

Disclosure Date: September 16, 2024 (last updated February 26, 2025)
Untrusted pointer dereference in UEFI firmware for some Intel(R) reference processors may allow a privileged user to potentially enable escalation of privilege via local access.
0
Attacker Value
Unknown

CVE-2023-41833

Disclosure Date: September 16, 2024 (last updated February 26, 2025)
A race condition in UEFI firmware for some Intel(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.
0
Attacker Value
Unknown

CVE-2023-25546

Disclosure Date: September 16, 2024 (last updated February 26, 2025)
Out-of-bounds read in UEFI firmware for some Intel(R) Processors may allow a privileged user to potentially enable denial of service via local access.
0