CVE-2024-24582: Improper Input Validation

Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...

CVE-2023-31276: Heap-based Buffer Overflow

Heap-based buffer overflow in BMC Firmware for the IntelR Server Board S2600WF, IntelR Server Board S2600ST, IntelR Server Board S2600BP, before version 02.01.0017 and IntelR Server Board M50CYP and IntelR Server Board D50TNP before version R01.01.0009 may allow a privileged user to enable...

CVE-2024-32938: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR MPI Library for Windows software before version 2021.13 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-48267: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in some IntelR System Security Report and System Resources Defense firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-37181: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use race condition in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable information disclosure via adjacent access...

ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Configuration Download

ABB Cylon Aspect 3.08.01 vstatConfigurationDownload.php Config Download Vendor: ABB Ltd. Product web page: https://www.global.abb Affected version: NEXUS Series, MATRIX-2 Series, ASPECT-Enterprise, ASPECT-Studio Firmware: =3.08.01 Summary: ASPECT is an award-winning scalable building energy...

K000148650: Intel processor vulnerabilities CVE-2024-22185 and CVE-2024-24985

Security Advisory Description CVE-2024-22185 Time-of-check Time-of-use Race Condition in some IntelR processors with IntelR ACTM may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2024-24985 Exposure of resource to wrong sphere in some IntelR processor...

CVE-2024-34164

Uncontrolled search path element in some IntelR MAS software before version 2.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28952

Uncontrolled search path for some IntelR IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-38383

Intel® Quartus® Prime Pro Edition software for Windows before version 24.2 is affected by CVE-2024-38383 due to an uncontrolled search path, which may let an authenticated user escalate privileges via local access. Intel’s advisory recommends updating to version 24.2 or later to mitigate, with a ...

CVE-2024-21799

Path traversal for some IntelR Extension for Transformers software before version 1.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28950

Uncontrolled search path for some IntelR oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28950

Uncontrolled search path for some IntelR oneAPI Math Kernel Library software for Windows before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32485

Improper Input Validation in some IntelR VROC software before version 8.6.0.2003 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28952

Uncontrolled search path for some IntelR IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28952: Uncontrolled Search Path Element

Uncontrolled search path for some IntelR IPP software for Windows before version 2021.12.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37024: Uncontrolled Search Path Element

Uncontrolled search path for some ACAT software maintained by IntelR for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36245: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR VTuneTM Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...