617 matches found
CVE-2020-12329
Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12329
Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12329
Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2020-12329
The vulnerability CVE-2020-12329 affects Intel VTune Profiler prior to 2020 Update 1. The issue is an uncontrolled search path that could allow an authenticated local user to escalate privileges. Affected component: Intel VTune Profiler (pre-2020 Update 1). Impact is described as local privilege ...
CVE-2020-12329: Uncontrolled Search Path Element
Uncontrolled search path in the IntelR VTuneTM Profiler before version 2020 Update 1 may allow an authenticated user to potentially enable escalation of privilege via local access...
Intel® VTune™ Profiler Advisory
Summary: A potential security vulnerability in the Intel® VTune™ Profiler may allow escalation of privilege. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-12329 Description: Uncontrolled search path in the IntelR VTuneTM Profiler befor...
wwww.dvdprofiler.com Cross Site Scripting vulnerability OBB-1284544
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Discourse < 2.4.0.beta6 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Discourse < 2.4.0.beta5 Multiple Vulnerabilities
Discourse is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:discourse:discourse"; ifdescripti...
Intel Fixes High-Severity Flaw in Performance Analysis Tool
Intel is warning of a high-severity vulnerability in its performance analysis tool called Intel VTune Profiler. If exploited the flaw allows an adversary to perform a privilege escalation attack, giving them elevated and unauthorized system access to a targeted system. The VTune Profiler, formerl...
CVE-2019-20058
Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040...
CVE-2019-20058
Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040...
Design/Logic Flaw
DISPUTED Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040...
CVE-2019-20058
CVE-2019-20058 affects Bolt 3.7.0 when the Symfony Web Profiler is enabled. The issue is an XSS vulnerability caused by unsanitized input (search?search=) being reflected on the profiler page; the vulnerability is disputed since the profiler is not intended for production use. Related to CVE-2018...
CVE-2019-20058
Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040...
PT-2019-16071 · Symfony +1 · Symfony Webprofiler +1
Name of the Vulnerable Software and Affected Versions: Bolt version 3.7.0 Description: The issue allows for XSS because unsanitized search input is shown on the profiler page when Symfony Web Profiler is used. It is noted that this issue is disputed as profiling was never intended for use in...
CVE-2019-20058: Improper Neutralization of Input During Web Page Generation
Bolt 3.7.0, if Symfony Web Profiler is used, allows XSS because unsanitized search?search= input is shown on the profiler page. NOTE: this is disputed because profiling was never intended for use in production. This is related to CVE-2018-12040...
Windows Escalate UAC Protection Bypass Via Dot Net Profiler
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Escalate UAC Protection Bypass Via dot net profiler', 'Description' = %q Microsoft Windows allows for the automatic loading of a profilin...
GHSA-995J-587R-259W Moderate severity vulnerability that affects rack-mini-profiler
Withdrawn, accidental duplicate publish. The rack-mini-profiler gem before 0.10.1 for Ruby allows remote attackers to obtain sensitive information about allocated strings and objects by leveraging incorrect ordering of security checks...