PT-2024-8831 · Intel · Intel Granulate

Name of the Vulnerable Software and Affected Versions: IntelR GranulateTM software versions prior to 4.30.1 Description: The issue is related to improper access control in IntelR GranulateTM software, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2024-8809 · Intel · Intel Server M20Ntp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server M20NTP Family UEFI affected versions not specified Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-8842 · Intel · Intel(R) Fortran Compiler Classic

Name of the Vulnerable Software and Affected Versions: IntelR Fortran Compiler Classic versions prior to 2021.13 Description: The issue is related to an uncontrolled search path in some IntelR Fortran Compiler Classic software, which may allow an authenticated user to potentially enable escalatio...

PT-2024-8838 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: Intel Distribution for Python versions prior to 2024.2 Description: The issue is related to incorrect default permissions in the Intel Distribution for Python software. This can potentially allow an authenticated user to escalate their...

PT-2024-8686 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable...

PT-2024-8843 · Intel · Oneapi Math Kernel Library

Name of the Vulnerable Software and Affected Versions: oneAPI Math Kernel Library versions prior to 2024.2 Description: The issue is related to an uncontrolled search path in the oneAPI Math Kernel Library, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2024-8768 · Intel · Intel Actm

Name of the Vulnerable Software and Affected Versions: IntelR processors with IntelR ACTM affected versions not specified Description: The issue is related to the exposure of a resource to the wrong sphere in some IntelR processors with IntelR ACTM, which may allow a privileged user to potentiall...

CVE-2024-50593

An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software...

CVE-2024-50590

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory of Elefant is "C:\Elefant1" which is writable for all users. ...

CVE-2024-50593

CVE-2024-50593 affects the Elefant Service tool; a local attacker can access restricted functions via a hard-coded "Hotline" password embedded in the Elefant service binary, which is shipped with the software. Affected component is the Elefant Service binary used by HASOMED Elefant. The root caus...

CVE-2024-50593 Hardcoded Service Password

An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software...

CVE-2024-50590 Local Privilege Escalation via Weak Service Binary Permissions

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory of Elefant is "C:\Elefant1" which is writable for all users. ...

CVE-2024-50590 Local Privilege Escalation via Weak Service Binary Permissions

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory of Elefant is "C:\Elefant1" which is writable for all users. ...

CVE-2024-50590

Elefant software (HASOMED Elefant) on Windows is affected by a local privilege escalation due to writable service binaries. The default install directory is C:\Elefant1, which is writable by all users, and the Elefant installer registers two Firebird database services running as NT AUTHORITY\SYST...

PT-2024-34345 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Elefant affected versions not specified Description: Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITYSYSTEM" by overwriting one of two Elefant service binaries with weak...

HASOMED Elefant 安全漏洞

HASOMED Elefant is an exercise software from the German company HASOMED. It specializes in meeting the needs of psychotherapists, child and adolescent psychotherapists, and medical psychotherapists. A security vulnerability exists in HASOMED Elefant, which arises from the fact that an attacker wi...

PT-2024-34348 · Unknown · Elefant Service Tool

Name of the Vulnerable Software and Affected Versions: Elefant Service tool affected versions not specified Description: An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded Hotline password in the Elefant...

HASOMED Elefant 安全漏洞

HASOMED Elefant is an exercise software from the German company HASOMED. It specializes in meeting the needs of psychotherapists, child and adolescent psychotherapists, and medical psychotherapists. HASOMED Elefant has a security vulnerability. An attacker with local access to a medical office...

PT-2024-34346 · Elefant +1 · Elefant Software Updater +1

Name of the Vulnerable Software and Affected Versions: Elefant Software Updater ESU affected versions not specified Description: An attacker with local access to a medical office computer can escalate their Windows user privileges to "NT AUTHORITYSYSTEM" by exploiting a command injection...

CVE-2024-10963

A flaw was found in pamaccess, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this...