Intel VTune Profiler < 2024.1 Privilege Escalation

The version of Intel VTune Profiler installed on the remote host is prior to 2024.1. It is, therefore, affected by a privilege escalation vulnerability. - Uncontrolled search path in some IntelR VTuneTM Profiler software before versions 2024.1 may allow an authenticated user to potentially enable...

CVE-2024-29015

Uncontrolled search path in some IntelR VTuneTM Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29015

Uncontrolled search path in some IntelR VTuneTM Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29015

CVE-2024-29015 describes an Uncontrolled search path vulnerability in Intel VTune Profiler software prior to 2024.1 that may allow an authenticated local user to escalate privileges. Affected products include VTune Profiler before 2024.1 (and related oneAPI/Base Toolkit components). The root caus...

CVE-2024-29015

Uncontrolled search path in some IntelR VTuneTM Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29015

Uncontrolled search path in some IntelR VTuneTM Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29015: Uncontrolled Search Path Element

Uncontrolled search path in some IntelR VTuneTM Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel VTune Profiler Software Advisory - Lenovo Support US

No description provided...

CVE-2023-31341

Insufficient validation of the Input Output Control IOCTL input buffer in AMD μProf may allow an authenticated attacker to cause an out-of-bounds write, potentially causing a Windows® OS crash, resulting in denial of service...

PT-2024-22672 · Intel · Intel Vtune Profiler

Name of the Vulnerable Software and Affected Versions: IntelR VTuneTM Profiler versions prior to 2024.1 Description: The issue is related to an uncontrolled search path in some IntelR VTuneTM Profiler software, which may allow an authenticated user to potentially enable escalation of privilege vi...

EMON Software Advisory

Summary: A potential security vulnerability in some EMON software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28953 Description: Uncontrolled search path in some EMON software before versio...

Intel® VTune™ Profiler Software Advisory

Summary: A potential security vulnerability in some Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-29015 Description: Uncontrolled search path in some Intel®...

Fedora: Security Advisory for rust-rbspy (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: rust-rbspy-0.17.0-5.fc39

Sampling CPU profiler for Ruby...

The vulnerability of the Object-Store Profiler Command Handler component of the operating system in Clustered Data ONTAP storage systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Object-Store Profiler Command Handler component in the operating system of Clustered Data ONTAP storage systems relates to the disclosure of information during data transmission. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Symfony Cross-Site Request Forgery vulnerability in the Web Profiler

All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony WebProfiler bundle are affected by this security issue. This issue has been fixed in Symfony 2.3.19, 2.4.9, and 2.5.4. Note that no fixes are provided for Symfony 2.0, 2.1, and 2.2 as they are not maintained anymore...

GHSA-V35G-4RRW-H4FW Symfony Cross-Site Request Forgery vulnerability in the Web Profiler

All 2.0.X, 2.1.X, 2.2.X, 2.3.X, 2.4.X, and 2.5.X versions of the Symfony WebProfiler bundle are affected by this security issue. This issue has been fixed in Symfony 2.3.19, 2.4.9, and 2.5.4. Note that no fixes are provided for Symfony 2.0, 2.1, and 2.2 as they are not maintained anymore...

PT-2024-10559 · Symfony · Symfony Webprofiler

Name of the Vulnerable Software and Affected Versions: Symfony WebProfiler bundle versions 2.0.X through 2.5.X Description: The Symfony Web Profiler, a development tool, should not be enabled on production servers due to the sensitive information it provides about a Symfony project. If enabled in...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling due to the unconstrained value of the incoming profilerruns parameter. An attacker can cause the server to allocate excessive resources, leading to a denial of service by sending...

UBUNTU-CVE-2024-35231

rack-contrib provides contributed rack middleware and utilities for Rack, a Ruby web server interface. Versions of rack-contrib prior to 2.5.0 are vulnerable to denial of service due to the fact that the user controlled data profilerruns was not constrained to any limitation. This would lead to...