CVE-2024-36283

Uncontrolled search path for the IntelR Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-6733 · Alvaria · Unified Ip Unified Director

Name of the Vulnerable Software and Affected Versions: Alvaria, Inc Unified IP Unified Director versions prior to 7.2SP2 Description: The issue allows a remote attacker to execute arbitrary code via the source and filename parameters to the "ProcessUploadFromURL.jsp" component. Recommendations: F...

CVE-2024-56973

CVE-2024-56973 affects Alvaria, Inc. Unified IP Unified Director prior to version 7.2SP2. The issue is an insecure permissions vulnerability in the ProcessUploadFromURL.jsp component that allows a remote attacker to execute arbitrary code by manipulating the source and filename parameters. The do...

Alvaria Unified IP Unified Director 安全漏洞

Alvaria Unified IP Unified Director is a multichannel unified communications platform from Alvaria, Inc. that is primarily used for contact center management and customer interaction management. A security vulnerability exists in Alvaria Unified IP Unified Director prior to version 7.4 SP2, which...

CVE-2024-56973

Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker to execute arbitrary code via the source and filename parameters to the ProcessUploadFromURL.jsp component...

CVE-2024-56973

Insecure Permissions vulnerability in Alvaria, Inc Unified IP Unified Director before v.7.2SP2 allows a remote attacker to execute arbitrary code via the source and filename parameters to the ProcessUploadFromURL.jsp component...

CVE-2024-36283

Uncontrolled search path for the IntelR Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36283

Uncontrolled search path for the IntelR Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36283

CVE-2024-36283 affects Intel Thread Director Visualizer software prior to 1.0.1. The root cause is an uncontrolled search path, which could allow an authenticated local user to escalate privileges. The advisory from Intel confirms the vulnerability and recommends updating to version 1.0.1 or late...

CVE-2024-36283

Uncontrolled search path for the IntelR Thread Director Visualizer software before version 1.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Thread Director Visualizer 代码问题漏洞

Intel Thread Director Visualizer is a desktop application from Intel Corporation USA. It helps end-users visualize CPU utilization and the distribution between P-cores performance cores and E-cores energy-efficient cores for Alder Lake and above platforms. A code issue vulnerability exists in Int...

PT-2025-6649 · Intel · Intel Thread Director Visualizer

Name of the Vulnerable Software and Affected Versions: IntelR Thread Director Visualizer version 1.0.0 Description: The issue concerns an uncontrolled search path in the IntelR Thread Director Visualizer software. This could potentially allow an authenticated user to enable escalation of privileg...

Intel® Thread Director Visualizer Advisory

Summary: A potential security vulnerability in the Intel® Thread Director Visualizer software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-36283 Description: Uncontrolled search path for the...

CVE-2024-42450

The Versa Director uses PostgreSQL Postgres to store operational and configuration data. It is also needed for High Availability function of the Versa Director. The default configuration has a common password across all instances of Versa Director. By default, Versa Director configures Postgres t...

CVE-2024-24820

Icinga Director is a tool designed to make Icinga 2 configuration handling easy. Not any of Icinga Director's configuration forms used to manipulate the monitoring environment are protected against cross site request forgery CSRF. It enables attackers to perform changes in the monitoring...

The vulnerability of the software platform interface for managing network infrastructure, Versa Director, allows a perpetrator to disclose protected information.

The vulnerability of the software platform interface for managing network infrastructure Versa Director is related to the lack of authenticity verification for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information by sendin...

The vulnerability of the Versa Director network infrastructure management software platform arises from the use of pre-installed credentials during configuration with PostgreSQL. This allows attackers to gain access to confidential data, enhance their privileges, and potentially execute arbitrary code.

The vulnerability of the Versa Director network infrastructure management software platform is related to the use of pre-installed credentials during configuration with PostgreSQL. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, enhance their...

openstack-tripleo-common: RHOSP Director Disables TLS Verification for Registry Mirrors

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform RHOSP director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a...

openstack-tripleo-common: RHOSP Director Disables TLS Verification for Registry Mirrors

A flaw was found in the openstack-tripleo-common component of the Red Hat OpenStack Platform RHOSP director. This vulnerability allows an attacker to deploy potentially compromised container images via disabling TLS certificate verification for registry mirrors, which could enable a...

Moderate: Red Hat Security Advisory: RHOSP 17.1.4 (openstack-tripleo-common and python-tripleoclient) security update

An update for openstack-tripleo-common and python-tripleoclient is now available for Red Hat OpenStack Platform RHOSP 17.1 Wallaby. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...