Intel Unite 代码问题漏洞

Intel Unite is a suite of enterprise meeting collaboration solutions from Intel Corporation USA. A security vulnerability exists in Intel Unite versions prior to 4.2 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentially enable privilege...

Intel NUC Chaco Canyon BIOS 代码问题漏洞

Intel NUC Chaco Canyon BIOS is an update software from Intel Corporation USA. A security vulnerability exists in Intel NUC Chaco Canyon BIOS, which stems from the presence of an uncontrolled search path. An attacker could exploit the vulnerability to escalate privileges...

Intel VTune Profiler 代码问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in Intel VTune Profiler...

Intel HDMI Firmware Update Tool 代码问题漏洞

Intel HDMI Firmware Update Tool is a firmware update tool from Intel Corporation USA. A security vulnerability exists in the Intel HDMI Firmware Update Tool prior to version 1.79.1.1, which stems from the presence of an uncontrolled search path that could allow an authenticated user to potentiall...

Intel NUC 代码问题漏洞

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC P14E Laptop Element software prior to version 1.1.44, which stems from the presence of an uncontrolled search path element that could allow an authenticated user to potentially enable...

Intel oneAPI Toolkit and component software installers 代码问题漏洞

Intel oneAPI Toolkit and component software installers is an application from Intel Corporation USA. A security vulnerability exists in Intel oneAPI Toolkit and component software installers prior to version 4.3.0.251, which originates from an uncontrolled search path. An authenticated user can...

PT-2023-13426 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to an uncontrolled search path in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2023-3148 · Unknown +11 · Postgresql +10

Name of the Vulnerable Software and Affected Versions: PostgreSQL affected versions not specified Description: The issue is related to a component of the PostgreSQL database management system, specifically the Schema Handler, which has inadequate access control. This can allow a remote attacker...

Node.js: insecure loading of ICU data through ICU_DATA environment variable

An untrusted search path vulnerability exists in Node.js. 19.6.1, 18.14.1, 16.19.1, and 14.21.3 that could allow an attacker to search and potentially load ICU data when running with elevated privileges...

Intel® MacCPUID Software Advisory

Summary: A potential security vulnerability in the Intel® MacCPUID software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-27180 Description: Uncontrolled search path in the IntelR MacCPUID...

Intel® Unite® Plugin SDK Advisory

Summary: A potential security vulnerability in the Intel® Unite® Plugin Software Development Kit SDK may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-32576 Description: Uncontrolled search path ...

Intel® VTuneTM Profiler Advisory

Summary: Potential security vulnerabilities in the Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41982 Description: Uncontrolled search path element in the...

Debian DSA-5395-1 : nodejs - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-5395 advisory. An untrusted search path vulnerability was discovered in Node.js, which could result in unexpected searching or loading ICU data when running with elevated privileges. For...

Debian: Security Advisory (DSA-5395-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2417

A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Files x86\HostMonitor\RMA-Win\rmaactive.exe. The manipulation leads to unquoted search path. It is possible to launch t...

Information disclosure

A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Files x86\HostMonitor\RMA-Win\rmaactive.exe. The manipulation leads to unquoted search path. It is possible to launch t...

CVE-2023-2417 ks-soft Advanced Host Monitor rma_active.exe unquoted search path

A vulnerability was found in ks-soft Advanced Host Monitor up to 12.56 and classified as problematic. Affected by this issue is some unknown functionality of the file C:\Program Files x86\HostMonitor\RMA-Win\rmaactive.exe. The manipulation leads to unquoted search path. It is possible to launch t...

CVE-2023-2417

CVE-2023-2417 affects ks-soft Advanced Host Monitor (up to v12.56). The issue is an unquoted search path in the service executable C:\Program Files (x86)\HostMonitor\RMA-Win\rma_active.exe, enabling a local attacker to trigger arbitrary execution. The advisory notes upgrading to v12.60 to mitigat...

KS-Soft HostMonitor 代码问题漏洞

KS-Soft HostMonitor is a system management tool from KS-Soft. that continuously monitors server availability and performance. A code issue vulnerability exists in KS-Soft HostMonitor version 12.56 and prior versions, which stems from a search path containing special characters...

Rocky Linux 8 : nodejs:14 (RLSA-2023:1743)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:1743 advisory. - The glob-parent package before 6.0.1 for Node.js allows ReDoS regular expression denial of service attacks against the enclosure regular expression...