CVE-2022-34864

Out-of-bounds read in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Out-of-bounds read in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26062

Uncontrolled search path element in the IntelR Trace Analyzer and Collector before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in the IntelR Trace Analyzer and Collector before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34864

CVE-2022-34864 describes an out-of-bounds read in Intel’s Trace Analyzer and Collector software prior to version 2021.5 that may allow an authenticated user to escalate privileges via local access. The vulnerability is within Intel Trace Analyzer and Collector (ITAC) before 2021.5, with an impact...

CVE-2022-32575

Intel® Trace Analyzer and Collector software contains an out-of-bounds write vulnerability (CVE-2022-32575) that affects versions prior to 2021.5. The issue may allow an authenticated user to potentially escalate privileges via local access. Intel advises updating to version 2021.5 or later to mi...

CVE-2022-34864

Out-of-bounds read in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34843

The set of connected documents confirms CVE-2022-34843 affects Intel(R) Trace Analyzer and Collector software prior to version 2021.5, due to an integer overflow that may allow an authenticated local user to escalate privileges. The Intel advisory and related sources specify update to version 202...

CVE-2022-26062

Uncontrolled search path element in the IntelR Trace Analyzer and Collector before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26062

The CVE-2022-26062 issue affects Intel Trace Analyzer and Collector components of the Intel oneAPI Toolkits prior to version 2021.6 within the HPC Toolkit. The root cause is an uncontrolled search path element that may allow an authenticated user to escalate privileges via local access. Impact is...

PT-2023-13080 · Intel · Intel Trace Analyzer/Collector

Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector versions prior to 2021.5 Description: The issue is an out-of-bounds write that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For versions...

SUSE CVE-2009-1687

The JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle allocation failures, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption a...

SUSE CVE-2012-0452

Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via vectors that trigger failure of an...

SUSE CVE-2016-9427

Integer overflow vulnerability in bdwgc before 2016-09-27 allows attackers to cause client of bdwgc denial of service heap buffer overflow crash and possibly execute arbitrary code via huge allocation...

SUSE CVE-2021-44964

Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.05.4.3 allows attackers to perform Sandbox Escape via a crafted script file...

SUSE CVE-2022-31745

If array shift operations are not used, the Garbage Collector may have become confused about valid objects. This vulnerability affects Firefox 101...

SUSE CVE-2022-42928

Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific state, could have lead to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox 106, Firefox ESR 102.4, and Thunderbird 102.4...

SUSE CVE-2022-45409

The garbage collector could have been aborted in several states and zones and GCRuntime::finishCollection may not have been called, leading to a use-after-free and potentially exploitable crash. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...

Security Bulletin: CVE-2022-3676 may affect Eclipse Openj9 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint

Summary CVE-2022-3676 vulnerability in Eclipse Openj9 could allow a remote attacker to bypass security restrictions, caused by improper runtime type check by the interface calls. Vulnerability Details CVEID:CVE-2022-3676 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security...