CVE-2023-25080: Protection Mechanism Failure

Protection mechanism failure in some IntelR Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated user to potentially enable information disclosure via local access...

PT-2023-7224

Name of the Vulnerable Software and Affected Versions Intel Data Center Manager SDK versions prior to 5.2 Description The issue is related to a protection mechanism failure in Intel Data Center Manager software, which may allow an unauthenticated user to potentially enable escalation of privilege...

CVE-2023-27383: Protection Mechanism Failure

Protection mechanism failure in some IntelR oneAPI HPC Toolkit 2023.1 and IntelRMPI Library software before version 2021.9 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

PT-2023-19920

Name of the Vulnerable Software and Affected Versions IntelR Distribution of OpenVINO toolkit software versions prior to 2023.0.0 Description The issue is related to a protection mechanism failure in the IntelR Distribution of OpenVINO toolkit software, which may allow an authenticated user to...

ALSA-2023:6595 Important: linux-firmware security, bug fix, and enhancement update

The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel: Improper access control for some IntelR PROSet/Wireless WiFi CVE-2022-27635 hw: intel: Improper access control for some IntelR PROSet/Wireless WiFi...

Fedora 39 : linux-firmware (2023-dd3ebcea25)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dd3ebcea25 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

RHEL 9 : linux-firmware (RHSA-2023:6595)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6595 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fixes: hw: intel:...

CVE-2023-5875: Protection Mechanism Failure

Mattermost Desktop fails to correctly handle permissions or prompt the user for consent on certain sensitive ones allowing media exploitation from a malicious mattermost server...

Advisory ROSA-SA-2023-2266

software: sqlite 3.41.2 OS: ROSA-CHROME packageevrstring: sqlite-3.41.2-1.src.rpm CVE-ID: CVE-2022-46908 BDU-ID: 2023-05686 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the command line interface of the SQLite database management system is related to implementation errors in the...

FortiEDR Protection Session Validity Period Code Execution

The vulnerability of the security protection mechanism for detecting and responding to security threats at FortiEDR endpoints is related to the incorrect duration of the session. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

CVE-2023-45372: Protection Mechanism Failure

An issue was discovered in the Wikibase extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. During item merging, ItemMergeInteractor does not have an edit filter running e.g., AbuseFilter...

Debian dla-3596 : firmware-adi - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3596 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3596-1 [email protected]...

Amazon Linux 2 : microvm-kernel (ALASMICROVM-KERNEL-4.14-2023-002)

The version of microvm-kernel installed on the remote host is prior to 4.14.246-199.474. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2MICROVM-KERNEL-4.14-2023-002 advisory. A flaw was found in the Linux kernel's implementation of wireless drivers using the...

CVE-2023-3280

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent...

CVE-2023-3280 Cortex XDR Agent: Local Windows User Can Disable the Agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to disable the agent...

CVE-2023-3280

CVE-2023-3280 – Cortex XDR Agent (Windows) : A protection mechanism flaw in the Palo Alto Networks Cortex XDR Agent for Windows allows a local user to disable the agent. The issue is described across multiple sources (including Palo Alto Networks advisory) as a protection mechanism problem; no wo...

CVE-2023-34984

Fortinet FortiWeb is affected by CVE-2023-34984 due to a protection mechanism failure that allows an attacker to execute unauthorized code or commands via specially crafted HTTP requests. Affected versions include FortiWeb 6.3.6–6.3.23, 6.4.0–6.4.3, 7.0.0–7.0.6, and 7.2.0–7.2.1. The issue is docu...

Palo Alto Networks Cortex XDR Security Vulnerability

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from U.S.-based Palo Alto Networks. A security vulnerability exists in Palo Alto Networks Cortex XDR that stems from a security flaw in the protecti...

CVE-2023-34984: Protection Mechanism Failure

A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests...

Oracle Linux 5 : ELSA-2013-1034-1: / kernel (ELSA-2013-10341)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-10341 advisory. - Heap-based buffer overflow in the tg3readvpd function in drivers/net/ethernet/broadcom/tg3.c in the Linux kernel before 3.8.6 allows physically...