CVE-2022-24379

The CVE relates to Intel Server System M70KLP Family BIOS firmware (before 01.04.0029). Root cause is improper input validation in the BIOS firmware, potentially allowing a privileged user to escalate privileges via local access. Affected products include Intel Server System M70KLP family BIOS fi...

CVE-2023-34431

CVE-2023-34431 : Intel Server Board BIOS firmware vulnerability due to improper input validation that may allow a privileged user to escalate privileges via local access. Affects various Intel Server Board/Server System BIOS firmware families (e.g., M20NTP, M70KLP, M10JNP2SB, S2600BP family). Imp...

CVE-2022-33945

CVE-2022-33945 involves improper input validation in some Intel® Server Board and Intel® Server System BIOS firmware, potentially allowing a privileged user to escalate privileges via local access. The issue affects Intel Server Board/System BIOS firmware (various families and products listed by ...

CVE-2023-40220

Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via local access...

CVE-2023-32662

Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access...

CVE-2023-32662

Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to potentially enable escalation of privilege via local access...

CVE-2022-36374

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36374

Improper access control in some IntelR Aptio V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-36396

The CVE-2022-36396 issue affects Intel® Aptio* V UEFI Firmware Integrator Tools prior to iDmiEdit-Linux-5.27.06.0017, due to improper access control that may allow a privileged local user to escalate privileges. Public details confirm affected versions and suggest updating to iDmiEdit-Linux-5.27....

CVE-2022-46298

CVE-2022-46298 involves incomplete cleanup in Intel Unison software that may allow a privileged local attacker to trigger a denial-of-service condition. Public sources in the provided documents identify the issue as a local-access vulnerability in Intel Unison components, with an impact on availa...

CVE-2022-46298

Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access...

kernel: vmwgfx: race condition leading to information disclosure vulnerability

A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from improper locking when performing operations on an object. This flaw allows a local privileged user to disclose information in the context o...

kernel: ext4: use-after-free in ext4_xattr_set_entry()

A use-after-free vulnerability was found in the Linux kernel's ext4 filesystem in the way it handled the extra inode size for extended attributes. This flaw allows a privileged local user to cause a system crash or other undefined behaviors...

kernel: lib/seq_buf.c has a seq_buf_putmem_hex buffer overflow

A buffer overflow write flaw was identified in seqbufputmemhex in lib/seqbuf.c in seqbuf in the Linux Kernel. This issue may allow a user with special debug privileges such as ftrace or root to cause an overflow in the destination buffer due to a missing sanity check...

PT-2023-29595 · Aruba · Aruba Access Point

Name of the Vulnerable Software and Affected Versions: Aruba access points affected versions not specified Description: The issue is related to buffer overflow vulnerabilities in the underlying CLI service. These vulnerabilities could lead to unauthenticated remote code execution by sending...

PT-2023-29605 · Hewlett Packard +1 · Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series; +2

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: Multiple authenticated command injection vulnerabilities exist in the command line interface. Successful exploitation of these vulnerabilities results i...

Zoom Client Encryption Issue Vulnerability

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. Zoom Client has an encryption issue vulnerability that stems from an encryption issue with in-conference chat. It may allow a privileged user to disclose information via network access...

PT-2023-18421 · Intel +1 · Intel Qat Library +1

Name of the Vulnerable Software and Affected Versions: IntelR QAT Library versions prior to 22.07.1 Description: The issue is related to improper buffer restrictions, which may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versions pri...

PT-2023-6936 · Zoom · Zoom Rooms Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows affected versions not specified Zoom VDI Client affected versions not specified Description: The issue is related to an untrusted search path in the software, which may allow a privileged user to conduct a denial...

Aruba Networks ArubaOS and InstantOS Command Injection Vulnerability

Aruba Networks ArubaOS and Aruba Networks InstantOS are both products of Aruba Networks, Inc. Aruba Networks InstantOS is an Arch Linux-based distribution. Aruba Networks ArubaOS and InstantOS have a security vulnerability that stems from multiple authenticated command injection vulnerabilities i...