CVE-2024-5622: Execution with Unnecessary Privileges

An untrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL = R 4.2.-07P3 and = R 4.4-00P3 may allow an authenticated local attacker to execute arbitrary code with elevated privileges...

CVE-2024-5623: Execution with Unnecessary Privileges

An untrusted search path vulnerability in B&R APROL = R 4.4-00P3 may be used by an authenticated local attacker to get other users to execute arbitrary code under their privileges...

CVE-2024-5624: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS in Shift Logbook application of B&R APROL = R 4.4-00P3 may allow a network-based attacker to execute arbitrary JavaScript code in the context of the user's browser session...

CVE-2024-8296: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in FeehiCMS up to 2.1.1 and classified as critical. This issue affects the function insert of the file /admin/index.php?r=user%2Fcreate. The manipulation of the argument Useravatar leads to unrestricted upload. The attack may be initiated remotely. The exploit has been...

CVE-2024-21857

Uncontrolled search path for some IntelR oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-21769

CVE-2024-21769 (Intel) describes an uncontrolled search path in the Windows installer for the Intel Ethernet Adapter Complete Driver Pack and the Intel(R) Ethernet Connection I219-LM installer. The weakness could allow an authenticated local attacker to escalate privileges. Intel’s advisory INTEL...

CVE-2024-23491

Uncontrolled search path in some IntelR Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23908

The advisory and CVE-2024-23908 concern Flexlm License Daemons for Intel® FPGA Software, where insecure inherited permissions before version v11.19.5.0 could let an authenticated, locally-present user escalate privileges. Affected product: Flexlm License Daemons for Intel® FPGA Software. Root cau...

CVE-2024-23908

Insecure inherited permissions in some Flexlm License Daemons for IntelR FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23908

Insecure inherited permissions in some Flexlm License Daemons for IntelR FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21784

Uncontrolled search path for some IntelR IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28876

CVE-2024-28876 affects Intel® MPI Library prior to version 2021.12 and can enable privilege escalation via an uncontrolled search path when run with local access by an authenticated user. The Intel advisory (INTEL-SA-01115) documents the vulnerability and recommends updating to Intel® MPI Library...

CVE-2024-28050

Improper access control in some IntelR ArcTM & IrisR Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-26022: Improper Access Control

Improper access control in some IntelR UEFI Integrator Tools on Aptio V for IntelR NUC may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-23499: Protection Mechanism Failure

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

SQL Injection Vulnerability in Enterprise Standardization Management System of R&S Standardization Technical Services (Shanghai) Co.

R&S Standardization Technical Services Shanghai Co. A SQL injection vulnerability exists in the Enterprise Standardization Management System of R&S Standardization Technical Services Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

CVE-2023-34424: Improper Input Validation

Improper input validation in firmware for some IntelR CSME may allow a privileged user to potentially enable denial of service via local access...

CVE-2023-49144: Out-of-bounds Read

Out of bounds read in OpenBMC Firmware for some IntelR Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access...