PT-2024-8773 · Intel +1 · Intel Vpl +1

Name of the Vulnerable Software and Affected Versions: Intel VPL versions prior to 24.1.4 Description: The issue is related to improper buffer restrictions in Intel VPL software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This is due to t...

PT-2024-8837 · Intel · Intel Server Board S2600St Family Bios/Firmware Update

Name of the Vulnerable Software and Affected Versions: Intel Server Board S2600ST Family BIOS and Firmware Update software all versions Description: The issue is related to an uncontrolled search path element in the Intel Server Board S2600ST Family BIOS and Firmware Update software. This could...

PT-2024-8774 · Intel +1 · Intel Vpl +1

Name of the Vulnerable Software and Affected Versions: Intel VPL software versions prior to 24.1.4 Description: The issue is related to an integer overflow in some Intel VPL software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This can be...

PT-2024-8819 · Intel · Intel Cip

Name of the Vulnerable Software and Affected Versions: IntelR CIP software versions prior to 2.4.10852 Description: The issue is related to insecure inherited permissions in IntelR CIP software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-8808 · Intel · Intel Server M20Ntp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server M20NTP Family affected versions not specified Description: The issue is related to improper access control in the UEFI firmware, which may allow a privileged user to potentially enable information disclosure via local access. Th...

PT-2024-8838 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: Intel Distribution for Python versions prior to 2024.2 Description: The issue is related to incorrect default permissions in the Intel Distribution for Python software. This can potentially allow an authenticated user to escalate their...

PT-2024-8842 · Intel · Intel(R) Fortran Compiler Classic

Name of the Vulnerable Software and Affected Versions: IntelR Fortran Compiler Classic versions prior to 2021.13 Description: The issue is related to an uncontrolled search path in some IntelR Fortran Compiler Classic software, which may allow an authenticated user to potentially enable escalatio...

PT-2024-8831 · Intel · Intel Granulate

Name of the Vulnerable Software and Affected Versions: IntelR GranulateTM software versions prior to 4.30.1 Description: The issue is related to improper access control in IntelR GranulateTM software, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2024-8809 · Intel · Intel Server M20Ntp Family

Name of the Vulnerable Software and Affected Versions: IntelR Server M20NTP Family UEFI affected versions not specified Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access...

PT-2024-8686 · Intel · Intel Binary Configuration Tool

Name of the Vulnerable Software and Affected Versions: Intel Binary Configuration Tool versions prior to 3.4.5 Description: The issue is related to an uncontrolled search path element in the Intel Binary Configuration Tool. Exploitation of this issue may allow an attacker to potentially enable...

PT-2024-8768 · Intel · Intel Actm

Name of the Vulnerable Software and Affected Versions: IntelR processors with IntelR ACTM affected versions not specified Description: The issue is related to the exposure of a resource to the wrong sphere in some IntelR processors with IntelR ACTM, which may allow a privileged user to potentiall...

PT-2024-8843 · Intel · Oneapi Math Kernel Library

Name of the Vulnerable Software and Affected Versions: oneAPI Math Kernel Library versions prior to 2024.2 Description: The issue is related to an uncontrolled search path in the oneAPI Math Kernel Library, which may allow an authenticated user to potentially enable escalation of privilege via...

Arbitrary file overwrite during recovery due to improper symbolic link handling

Acronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin improperly handled symbolic links during recovery. This allowed plugin users with unprivileged local access to the server to overwrite arbitrary files on the server. They could achieve this by creating a symbolic link in their home...

CVE-2024-50593

An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software...

CVE-2024-50590

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory of Elefant is "C:\Elefant1" which is writable for all users. ...

CVE-2024-50593

The Elefant Service tool (an exercise software by HASOMED ) contains a security vulnerability where an attacker with local access to a medical office computer can access restricted functions . This is caused by a hard-coded "Hotline" password within the Elefant service binary shipped with the sof...

CVE-2024-50593 Hardcoded Service Password

An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software...

CVE-2024-50590 Local Privilege Escalation via Weak Service Binary Permissions

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory of Elefant is "C:\Elefant1" which is writable for all users. ...

CVE-2024-50590 Local Privilege Escalation via Weak Service Binary Permissions

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory of Elefant is "C:\Elefant1" which is writable for all users. ...

CVE-2024-50590

The Elefant software (used by medical offices) is vulnerable to local privilege escalation because its default installation directory, C:\Elefant1, is world-writable. The software registers two Firebird database services—fbserver.exe and fbguard.exe —which run with NT AUTHORITY\SYSTEM privileges....