CVE-2024-38383

Uncontrolled search path for some IntelR QuartusR Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31407

Uncontrolled search path in some IntelR High Level Synthesis Compiler software for IntelR QuartusR Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32044

Improper access control for some IntelR ArcTM Pro Graphics for Windows drivers before version 31.0.101.5319 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-38383

Intel® Quartus® Prime Pro Edition software for Windows before version 24.2 is affected by CVE-2024-38383 due to an uncontrolled search path, which may let an authenticated user escalate privileges via local access. Intel’s advisory recommends updating to version 24.2 or later to mitigate, with a ...

CVE-2024-32044

Improper access control for some IntelR ArcTM Pro Graphics for Windows drivers before version 31.0.101.5319 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-31407

Uncontrolled search path in some IntelR High Level Synthesis Compiler software for IntelR QuartusR Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-31407

Affected software: Intel® High Level Synthesis Compiler within Intel® Quartus® Prime Pro Edition Software before version 24.1. Vulnerability: Uncontrolled search path that may allow an authenticated user to escalate privileges via local access. Impact: Privilege escalation potential on a local at...

CVE-2024-31407

Uncontrolled search path in some IntelR High Level Synthesis Compiler software for IntelR QuartusR Prime Pro Edition Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2024-24373 · Intel · Intel Arc Pro Graphics

Name of the Vulnerable Software and Affected Versions: IntelR ArcTM Pro Graphics for Windows versions prior to 31.0.101.5319 Description: The issue is related to improper access control in some IntelR ArcTM Pro Graphics for Windows drivers. This may allow an authenticated user to potentially enab...

Intel Quartus Prime Pro 代码问题漏洞

Intel Quartus Prime Pro is a set of multi-platform design environments from Intel Corporation USA. The product is primarily used for programming programmable logic devices. A code issue vulnerability exists in Intel Quartus Prime Pro versions prior to 24.2 that stems from an uncontrolled search...

PT-2024-39778 · Trimble · Trimble Sketchup Pro

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Pro affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this issue, where the...

(0Day) Trimble SketchUp Pro SKP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Pro. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

PT-2024-8817 · Intel · Intel Quartus Prime Pro Edition +1

Name of the Vulnerable Software and Affected Versions: Intel High Level Synthesis Compiler for Intel Quartus Prime Pro Edition Software versions prior to 24.1 Description: The issue is related to an uncontrolled search path element in the Intel High Level Synthesis HLS Compiler, part of the Intel...

CVE-2024-46966

The Ikhgur mn.ikhgur.khotoch aka Video Downloader Pro & Browser application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component...

CVE-2024-46966

The Ikhgur mn.ikhgur.khotoch aka Video Downloader Pro & Browser application through 1.0.42 for Android allows an attacker to execute arbitrary JavaScript code via the mn.ikhgur.khotoch.MainActivity component...

WordPress WP Listings Pro plugin <= 3.0.14 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin WP Listings Pro versions = 3.0.14...

WordPress Pro Addons For Elementor plugin <= 1.5.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gab Patchstack Alliance in WordPress Plugin Pro Addons For Elementor versions = 1.5.0...

WordPress WP Listings Pro Plugin <= 3.0.14 is vulnerable to Cross Site Scripting (XSS)

Software WP Listings Pro Type Plugin Vulnerable versions = 3.0.14 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-51903 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 421c376a6a04 Credits SOPROBRO Required privilege Contributor...

Enel X Waybox 安全漏洞

The Enel X Waybox is a home charging station from Enel X, Inc. A security vulnerability exists in the Enel X Waybox Pro version 3.0, which stems from the ability to bypass Web Management API authentication and provide administrator rights to the Waybox system...

CVE-2024-37439

Missing Authorization vulnerability in Uncanny Owl Uncanny Toolkit Pro for LearnDash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Uncanny Toolkit Pro for LearnDash: from n/a through 4.1.4.0...