CVE-2024-5523 SQL injection vulnerability in Astrotalks

SQL injection vulnerability in Astrotalks affecting version 10/03/2023. This vulnerability could allow an authenticated local user to send a specially crafted SQL query to the 'searchString' parameter and retrieve all information stored in the database...

CVE-2024-22026

A local privilege escalation vulnerability in EPMM before 12.1.0.0 allows an authenticated local user to bypass shell restriction and execute arbitrary commands on the appliance...

UBUNTU-CVE-2023-48368

Improper input validation in IntelR Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-46689

Improper neutralization in IntelR Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget, which stems from an improper neutralization issue. It could allow an authenticated user to escalate privileges via...

Intel Power Gadget 安全漏洞

Intel Power Gadget is a software-based power consumption monitoring tool for Intel Core processors from Intel Corporation USA. A security vulnerability exists in Intel Power Gadget that stems from an improper initialization issue. It could allow an authenticated user to conduct a denial of servic...

PT-2024-13057 · Intel · Intel Power Gadget

Name of the Vulnerable Software and Affected Versions: IntelR Power Gadget software for Windows affected versions not specified Description: The issue is related to improper neutralization in the IntelR Power Gadget software for Windows, which may allow an authenticated user to potentially enable...

CVE-2023-26592

Deserialization of untrusted data in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access...

Intel VROC software security vulnerability

Intel VROC software is an application from Intel Corporation USA. A security vulnerability exists in Intel VROC software prior to version 8.0.8.1001, which stems from an incorrect default privilege issue that could lead to privilege escalation via local access by an authenticated user...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability previously existed in Intel ThunderboltTM DCH drivers for Windows version 88, which stemmed from improper access control in the affected product. This could result in an authenticated user...

PT-2024-1786 · Intel · Intel Battery Life Diagnostic Tool

Name of the Vulnerable Software and Affected Versions: Intel Battery Life Diagnostic Tool versions prior to 2.3.1 Description: The issue is related to an uncontrolled search path element in the Intel Battery Life Diagnostic Tool software. Exploitation of this issue may allow an attacker to escala...

hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an authenticated user to enable escalation of privilege via local access...

CVE-2023-5593

The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain a privilege escalation by sending a crafted CREATE message...

CVE-2023-28723

Exposure of sensitive information to an unauthorized actor in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-14979 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue concerns the insertion of sensitive information into a log file, potentially allowing an authenticated user to enable information disclosure via local access. Recommendations...

CVE-2023-31427

Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned privilege. Starting with Fabric OS v9.1.0, “root” account access is disabled...

PT-2023-24689 · Zoom · Zoom Rooms For Windows

Name of the Vulnerable Software and Affected Versions: Zoom Rooms for Windows versions prior to 5.15.0 Description: The issue is related to an insecure temporary file in the installer, which may allow an authenticated user to enable an escalation of privilege via local access. Recommendations: Fo...

Rockwell Automation FactoryTalk Services Platform 授权问题漏洞

Rockwell Automation FactoryTalk Services Platform is a suite of services platforms from Rockwell Automation, Inc. that consists of multiple products that provide applications with routine services such as diagnostic information, health monitoring, and real-time data access. A security vulnerabili...

Intel NUC 代码问题漏洞

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC P14E Laptop Element software prior to version 1.1.44, which stems from the presence of an uncontrolled search path element that could allow an authenticated user to potentially enable...

PT-2023-20146 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS version 9.4.0.x Description: The issue concerns exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this in certificate management, leading to a...