CVE-2021-0131: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Use of cryptographically weak pseudo-random number generator PRNG in an API for the IntelR Security Library before version 3.3 may allow an authenticated user to potentially enable information disclosure via network access...

CVE-2021-0077: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR VTuneTM Profiler before version 2021.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0086: Observable Discrepancy

Observable response discrepancy in floating-point operations for some IntelR Processors may allow an authorized user to potentially enable information disclosure via local access...

CVE-2021-0054: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in system firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

Weak password vulnerability in Brickcom-MD-300Np-360P

Brickcom Corporation Brickcom is composed of R&D team with rich experience in surveillance industry, and develops digital surveillance products with advanced technology. Including Mega IP Camera, Wireless IP Camera, Video Server, 3G Video Transmission NVR Embedded Network DVR, CMS Client Platform...

PT-2021-11034

Name of the Vulnerable Software and Affected Versions: IntelR Server Boards, Server Systems and Compute Modules versions prior to 2.48.ce3e3bd2 Description: The issue is related to an out of bounds write in the BMC firmware, which may allow an authenticated user to potentially enable escalation o...

CVE-2021-0134: Improper Input Validation

Improper input validation in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

CVE-2021-0052: Improper Privilege Management

Incorrect default privileges in the IntelR Computing Improvement Program before version 2.4.6522 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0132: Missing Release of Resource after Effective Lifetime

Missing release of resource after effective lifetime in an API for the IntelR Security Library before version 3.3 may allow a privileged user to potentially enable denial of service via network access...

CVE-2021-0067: Undefined Security Weakness

Improper access control in system firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2021-0057: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0106: Incorrect Default Permissions

Incorrect default permissions in the IntelR OptaneTM DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0090: Uncontrolled Search Path Element

Uncontrolled search path element in IntelR DSA before version 20.11.50.9 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0058: Incorrect Default Permissions

Incorrect default permissions in the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0056: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions for the IntelR NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-0102: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the Intel UniteR Client for Windows before version 4.2.25031 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2021-0051: Improper Input Validation

Improper input validation in the IntelR SPS versions before SPSE504.04.04.023.0, SPSE504.04.03.228.0 or SPSSoC-A05.00.03.098.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2020-24512: Observable Discrepancy

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24486: Improper Input Validation

Improper input validation in the firmware for some IntelR Processors may allow an authenticated user to potentially enable denial of service via local access...

CVE-2020-12358: Out-of-bounds Write

Out of bounds write in the firmware for some IntelR Processors may allow a privileged user to potentially enable denial of service via local access...