CVE-2022-30530

CVE-2022-30530 concerns an Intel DSA software vulnerability affecting versions prior to 22.4.26, where a protection mechanism failure could allow an authenticated user to escalate privileges via local access. The issue is documented in the Intel DSA advisory and corroborated by multiple feeds; th...

Intel Media SDK 安全漏洞

Intel Media SDK is a multimedia SDK Software Development Kit from Intel Corporation. The product is primarily used for video encoding, decoding and processing in Windows and embedded Linux applications. A security vulnerability exists in Intel Media Software Development Kit, which stems from a...

CVE-2022-36797: Undefined Security Weakness

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.1 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-36416: Undefined Security Weakness

Protection mechanism failure in the IntelR Ethernet 500 Series Controller drivers for VMware before version 1.10.0.13 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Ethernet VMWare drivers 安全漏洞

Intel Ethernet VMWare drivers are an IntelR Ethernet VMWare driver. A security vulnerability exists in IntelR Ethernet 500 Series Controller drivers for VMWare versions prior to 1.10.0.13, which is caused due to a protection mechanism failure and can be exploited by an authenticated attacker to...

PT-2023-12897 · Intel +1 · Intel Media Sdk +1

Name of the Vulnerable Software and Affected Versions: IntelR Media SDK versions prior to 22.2.2 Description: The issue is related to a protection mechanism failure in the IntelR Media SDK software, which may allow an authenticated user to potentially enable escalation of privilege via local...

CVE-2022-36289: Undefined Security Weakness

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-13473 · Intel +1 · Intel Media Sdk +1

Name of the Vulnerable Software and Affected Versions: IntelR Media SDK versions prior to 22.2.2 Description: The issue is related to a protection mechanism failure in the IntelR Media SDK software, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2023-13010 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA software versions prior to 22.4.26 Description: The issue is related to a protection mechanism failure in the IntelR DSA software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-0002

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent...

CVE-2023-0002: Protection Mechanism Failure

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute privileged cytool commands that disable or uninstall the agent...

CVE-2023-0581 PrivateContent <= 8.4.3 - Protection Mechanism Bypass

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...

CVE-2023-0581

CVE-2023-0581 affects the PrivateContent WordPress plugin (up to version 8.4.3). Root cause: login protection relies on client-side validation to determine blocklisted IPs, allowing unauthenticated bypass of login restrictions. Impact is the potential to brute-force login bypass. Mitigation: upda...

CVE-2023-0581: Client-Side Enforcement of Server-Side Security

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it...

Cross-site Request Forgery (CSRF)

cakephp/cakephp is vulnerable to Cross-Site Request Forgery CSRF. A remote attacker is able to bypass the CSRF protection mechanism via the $cookie variable in validateToken function because CsrfComponent fails to invalidate requests that are missing both the CSRF token, and CSRF post data...

CVE-2023-22809

In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user-provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attacker to append arbitrary entries to the list of files to process. This can lead to privilege escalation. Affected...

Duplicate Advisory: Ecto lacks a protection mechanism

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2xxx-fhc8-9qvq. This link is maintained to preserve external references. Original Description Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

CVE-2017-20166

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

Design/Logic Flaw

Ecto 2.2.0 lacks a certain protection mechanism associated with the interaction between isnil and raise...

CVE-2017-20166

CVE-2017-20166 affects Ecto 2.2.0, describing a lack of a protection mechanism in the interaction between is_nil and raise. The surrounding entries (NVD, Red Hat, OSV, GHSA duplicates, CNNVD, CVE records) consistently reference this issue with Ecto 2.2.0 and do not provide concrete exploit detail...