CVE-2024-52293 Craft has a Potential Remote Code Execution via missing path normalization & Twig SSTI

Craft is a content management system CMS. Prior to 4.12.2 and 5.4.3, Craft is missing normalizePath in the function FileHelper::absolutePath could lead to Remote Code Execution on the server via twig SSTI. This is a sequel to CVE-2023-40035. This vulnerability is fixed in 4.12.2 and 5.4.3...

RHSA-2024:9016 Red Hat Security Advisory: thunderbird security update

Bulletin has no description...

PT-2025-25271

Name of the Vulnerable Software and Affected Versions Trend Micro Apex Central versions prior to 8.0.7007 Description The issue is related to an insecure deserialization operation in Trend Micro Apex Central, which could lead to a pre-authentication remote code execution on affected installations...

Intel VTune Profiler Advisory - Lenovo Support US

No description provided...

Intel Graphics Software Advisory - Lenovo Support US

No description provided...

Intel SGX SDK Advisory - Lenovo Support US

No description provided...

CVE-2024-50336 matrix-js-sdk has insufficient MXC URI validation which allows client-side path traversal

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the...

Intel CST Software Advisory - Lenovo Support US

No description provided...

CVE-2024-47588

CVE-2024-47588 affects SAP NetWeaver Java (Software Update Manager 1.1). Under certain upgrade-error conditions, credentials are written in plaintext to a log file, enabling a local attacker (authenticated as a non-administrative user) to exfiltrate credentials from logs. The documented impact is...

CVE-2024-47588 Information Disclosure vulnerability in SAP NetWeaver Java (Software Update Manager)

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

Intel PROSet/Wireless WiFi November 2024 Security Update

Intel has informed HP of potential security vulnerabilities in some Intel® PROSet/Wireless WiFi products, which might allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the...

PT-2024-8831 · Intel · Intel Granulate

Name of the Vulnerable Software and Affected Versions: IntelR GranulateTM software versions prior to 4.30.1 Description: The issue is related to improper access control in IntelR GranulateTM software, which may allow an authenticated user to potentially enable escalation of privilege via local...

HPESBUX04729 rev.1 - HP-UX NTP Software, Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Write Access to the File System, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX NTP Software - Prior to C.4.2.8.7.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...

CVE-2024-47588: Insufficiently Protected Credentials

In SAP NetWeaver Java Software Update Manager 1.1, under certain conditions when a software upgrade encounters errors, credentials are written in plaintext to a log file. An attacker with local access to the server, authenticated as a non-administrative user, can acquire the credentials from the...

Intel® TDX Seamldr Software Advisory

Summary: A potential security vulnerability in some Intel® TDX Seamldr module software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21850 Description: Sensitive information in resource not...

Intel® Fortran Compiler Classic Software Advisory

Summary: A potential security vulnerability in some Intel® Fortran Compiler Classic software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28881 Description: Uncontrolled search path for some...

Intel® CST Software Advisory

Summary: A potential security vulnerability in some Intel® Context Sensing Technology Intel® CST software may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-29076 Description: Uncaught exception for...

Intel® Quartus® Prime Pro Edition Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01195.html...

Intel® Extension for Transformers Software Advisory

Summary: A potential security vulnerability in some Intel® Extension for Transformers software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21799 Description: Path traversal for some Intel®...

Intel® Optane™ PMem Management Software Advisory

Summary: A potential security vulnerability in some Intel® Optane™ Persistent Memory PMem management software may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-36275 Description: NULL pointer...