47 matches found
DEBIAN-CVE-2025-20054
Uncaught exception in the core management mechanism for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...
SUSE CVE-2024-21810
Improper input validation in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...
Zoom Workplace Security Vulnerability
Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper input validation in the desktop application installer could allow an authenticated user to perform a denial of service via local access...
Intel Neural Compressor 安全漏洞
Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily implement AI model optimization. A security vulnerability previously existed in Intel Neural Compressor version 2.5.0, which stemmed from the presence of a race condition issue. It coul...
PT-2024-19060 · Intel · Intel Neural Compressor
Name of the Vulnerable Software and Affected Versions: IntelR Neural Compressor versions prior to 2.5.0 Description: A Time-of-check Time-of-use race condition may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: For versions prior to...
Intel Server Product OpenBMC Security Vulnerability
Intel Server Product OpenBMC is an open source Baseboard Management Controller BMC solution from Intel Corporation USA. A security vulnerability previously existed in the Intel Server Product OpenBMC firmware egs-1.09 version, which stemmed from improper authentication in the affected product. It...
Trellix Anti-Malware Engine Backlink Vulnerability
Trellix Anti-Malware Engine is a security program from FireEye Trellix, Inc. Trellix Anti-Malware Engine version 6700 suffers from a back-link vulnerability that stems from the presence of a symbolic link manipulation vulnerability that allows privilege escalation by authenticated local users...
PT-2023-21920 · Unknown · Hyperscan Library
Name of the Vulnerable Software and Affected Versions: Hyperscan Library versions prior to 5.4.1 Description: Insufficient control flow management in the Hyperscan Library may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior...
Rockwell Automation FactoryTalk Services Platform 信任管理问题漏洞
Rockwell Automation FactoryTalk Services Platform is a suite of services platforms from Rockwell Automation, Inc. that consists of multiple products that provide applications with routine services such as diagnostic information, health monitoring, and real-time data access. A security vulnerabili...
PT-2023-13904 · Intel · Intel Nuc Hdmi Firmware Update Tool
Name of the Vulnerable Software and Affected Versions: IntelR HDMI Firmware Update Tool for NUC versions prior to 1.79.1.1 Description: The issue is related to incorrect default permissions that may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2023-13771 · Intel · Intel Dcm
Name of the Vulnerable Software and Affected Versions: Intel DCM software versions prior to 5.0.1 Description: The issue concerns the exposure of a data element to the wrong session, potentially allowing an authenticated user to escalate privileges via local access. Recommendations: For versions...
CVE-2023-25536
Dell PowerScale OneFS 9.4.0.x contains exposure of sensitive information to an unauthorized actor. A malicious authenticated local user could potentially exploit this vulnerability in certificate management, leading to a potential system takeover...
CVE-2022-33892
Path traversal in the IntelR Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access...
hw: cpu: incomplete clean-up in specific special register write operations (aka DRPW)
A flaw was found in hw. Incomplete cleanup in specific special register write operations for some Intel® Processors may allow an authenticated user to enable information disclosure via local access...
UBUNTU-CVE-2021-33096
Improper isolation of shared resources in network on chip for the IntelR 82599 Ethernet Controllers and Adapters may allow an authenticated user to potentially enable denial of service via local access...
hw: information disclosure on some Intel Atom processors
A potential domain bypass transient execution vulnerability was discovered on some Intel Atom® processors that uses a microarchitectural incidental channel. Currently this channel can reveal supervisor data in the L1 cache and the contents of recent stores. As a consequence, this issue may allow ...
Intel Unite 安全漏洞
Intel Unite is an enterprise meeting collaboration solution from Intel Corporation USA. A security vulnerability exists in Intel Unite 4.2.25031, which stems from incorrect access control that could allow authenticated users to enable privilege escalation via local access...
Intel Unite 代码问题漏洞
Intel Unite is a suite of enterprise meeting collaboration solutions from Intel Corporation. A security vulnerability exists in Intel UniteR Client versions prior to 4.2.25031, which stems from an uncontrolled search path that could allow authenticated users to potentially enable privilege...
CVE-2021-1128
A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit...
hardware: Microarchitectural Data Sampling Uncacheable Memory (MDSUM)
Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access...