Intel® Server Board S2600ST Family Firmware Advisory 

Summary: A potential security vulnerability in some Intel® Server Board S2600ST Family firmware may allow escalation of privilege. Intel is releasing software pdates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28947 Description: Improper input validation in...

Intel® MAS (GUI) Software Advisory

Summary: A potential security vulnerability in Intel® Memory and Storage Tool GUI Intel® MAS may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-27461 Description: Incorrect default permissions in softwa...

EMON Software Advisory

Summary: A potential security vulnerability in some EMON software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28953 Description: Uncontrolled search path in some EMON software before versio...

 Intel® Arc™ & Iris® Xe Graphics Software Advisory

Summary: A potential security vulnerability in the Intel® Arc™ & Iris® Xe Graphics software may allow denial of service. Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28050 Description: Improper access control in some Intel® Arc™ & Iri...

Intel® License Manager for FLEXlm Product Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01126.html...

Intel® VROC Software Advisory

Summary: A potential security vulnerability in some Intel® Virtual RAID on CPU Intel® VROC software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-23489 Description: Uncontrolled search path f...

Intel® oneAPI Compiler Software Advisory

Summary: A potential security vulnerability in some Intel® oneAPI Compiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21857 Description: Uncontrolled search path for some Intel®...

Intel® IPP Cryptography Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Cryptography Intel® IPP Cryptography software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21784...

PT-2024-8900 · Intel · Intel License Manager For Flexlm

Name of the Vulnerable Software and Affected Versions: IntelR License Manager for FLEXlm product software versions prior to 11.19.5.0 Description: The issue is related to an uncontrolled search path in the Intel License Manager for FLEXlm product software. This could allow an authenticated user t...

AMD Graphics Driver August 2024 Security Update

AMD has informed HP of potential security vulnerabilities identified in some AMD Graphics Drivers for Windows, which might allow denial of service or information disclosure. AMD is releasing software updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential...

Intel®  Simics Package Manager Software Advisory

Summary: A potential security vulnerability in some Intel® Simics Package Manager software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-26027 Description: Uncontrolled search path for some...

Intel® Advisor Software Advisory

Summary: A potential security vulnerability in some Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-26025 Description: Incorrect default permissions for some Intel®...

Intel® TDX Module Software Advisory

Summary: A potential security vulnerability in Intel® Trust Domain Extensions TDX module software may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39283 Description: Incomplete filtering of...

 Intel® Quartus® Prime Pro Edition Design Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01127.html...

PT-2024-30313 · WordPress · Wp Table Builder

Name of the Vulnerable Software and Affected Versions: WP Table Builder – WordPress Table Plugin versions 1.4.15 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Stored XSS, which...

PT-2024-6113 · Cisco · Cisco Nx-Os +1

Name of the Vulnerable Software and Affected Versions: Cisco NX-OS Software affected versions not specified Description: The issue is related to insufficient security restrictions when executing application arguments from the Bash shell, allowing an authenticated, local attacker with privileges t...

DSA-5745-1 postgresql-15 - security update

Bulletin has no description...

CVE-2024-42366 VR Overlay RCE

VRCX is an assistant/companion application for VRChat. In versions prior to 2024.03.23, a CefSharp browser with over-permission and cross-site scripting via overlay notification can be combined to result in remote command execution. These vulnerabilities are patched in VRCX 2023.12.24. In additio...

CVE-2024-42357 Shopware vulnerable to blind SQL-injection in DAL aggregations

Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the Shopware application API contains a search functionality which enables users to search through information stored within their Shopware instance. The searches performed by this function can be aggregated using the...

CVE-2024-42356 Shopware vulnerable to Server Side Template Injection in Twig using Context functions

Shopware is an open commerce platform. Prior to versions 6.6.5.1 and 6.5.8.13, the context variable is injected into almost any Twig Template and allows to access to current language, currency information. The context object allows also to switch for a short time the scope of the Context as a...