<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 18:01:51 +0000</lastBuildDate>
    <item>
      <title>CVE-2024-38510</title>
      <link>https://db.gcve.eu/vuln/cve-2024-38510</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Lenovo XClarity Controller, lenovo thinkagile_hx5530_firmware, lenovo thinkagile_hx7530_firmware, lenovo thinkagile_vx3331_firmware, lenovo thinkagile_hx_enclosure_certified_node_firmware, lenovo thinkagile_hx1021_edg_firmware, lenovo thinkagile_hx1320_firmware, lenovo thinkagile_hx1331_firmware, lenovo thinkagile_hx1321_firmware, lenovo thinkagile_hx1520-r_firmware and 101 more&lt;/p&gt;
&lt;p&gt;A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Lenovo XClarity Controller, lenovo thinkagile_hx5530_firmware, lenovo thinkagile_hx7530_firmware, lenovo thinkagile_vx3331_firmware, lenovo thinkagile_hx_enclosure_certified_node_firmware, lenovo thinkagile_hx1021_edg_firmware, lenovo thinkagile_hx1320_firmware, lenovo thinkagile_hx1331_firmware, lenovo thinkagile_hx1321_firmware, lenovo thinkagile_hx1520-r_firmware and 101 more&lt;/p&gt;
&lt;p&gt;A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an authenticated XCC user with elevated privileges to perform command injection via specially crafted file uploads.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/cve-2024-38510</guid>
    </item>
  </channel>
</rss>
