CVE-2024-39766

Improper neutralization of special elements used in SQL command in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28028

CVE-2024-28028 affects Intel® Neural Compressor software prior to version 3.0. The issue is caused by improper input validation, which can allow an unauthenticated user to potentially escalate privileges via adjacent access. The advisory from Intel lists this CVE and notes mitigations through upd...

CVE-2024-39368

CVE-2024-39368 affects Intel(R) Neural Compressor prior to v3.0. The issue is an SQL Injection due to improper neutralization of special elements in SQL commands, allowing an authenticated user to potentially escalate privileges via adjacent access. Per disclosures, the vulnerability is rated hig...

CVE-2024-39368

Improper neutralization of special elements used in an SQL command 'SQL Injection' in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-39368

Improper neutralization of special elements used in an SQL command 'SQL Injection' in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-34165

Uncontrolled search path in some IntelR oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-34165

CVE-2024-34165 concerns an uncontrolled search path in Intel’s oneAPI DPC++/C++ Compiler (and related toolkits) prior to version 2024.2 . The root issue could allow an authenticated, local attacker to escalate privileges. Affected products include the Intel oneAPI Base Toolkit, HPC Toolkit, DPC++...

CVE-2024-34165

Uncontrolled search path in some IntelR oneAPI DPC++/C++ Compiler before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32483

Improper access control for some IntelR EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32483

Improper access control for some IntelR EMA software before version 1.13.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32483

CVE-2024-32483 affects Intel® EMA software before version 1.13.1.0. The issue is improper access control, potentially enabling privilege escalation for an authenticated user via local access. CVSS v3.1 base score 8.2 (LOCAL, LOW complexity, PR:L, UI:R) and CVSS v4.0 base score 7.0 reflect confide...

CVE-2024-36294

Insecure inherited permissions for some IntelR DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36294

Insecure inherited permissions for some IntelR DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36294

Intel® DSA software before version 24.3.26.8 has insecure inherited permissions that may allow an authenticated, locally-present user to escalate privileges. The issue is caused by improper access control in the DSA software, enabling local privilege elevation. Affected products: Intel® DSA softw...

CVE-2024-36488

CVE-2024-36488 involves Intel® Driver & Support Assistant (Intel DSA). Multiple sources confirm an improper access control vulnerability in DSA versions before 24.3.26.8 that can allow an authenticated, local attacker to escalate privileges. The Red Hat, ZDI, CIRCL, and PT-Security entries align ...

CVE-2024-36488

Improper Access Control in some IntelR DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36488

Improper Access Control in some IntelR DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37025

Incorrect execution-assigned permissions in some IntelR Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...