12720 matches found
Libva Library Advisory
Summary: software A potential security vulnerability in some Libva library maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-39929 Description: Uncontrolled search path in so...
Intel® Graphics Command Center Service Software Advisory
Summary: A potential security vulnerability in some Intel® Graphics Command Center Service software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-43751 Description: Uncontrolled search path i...
Intel® Trace Analyzer and Collector Software Advisory
Summary: A potential security vulnerability in some Intel® Trace Analyzer and Collector software may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-22384 Description: Out-of-bounds read for some...
PT-2024-18159
Name of the Vulnerable Software and Affected Versions Phoenix SecureCore for Intel Gemini Lake versions 4.1.0.1 through 4.1.0.566 Description The issue is related to a potential buffer overflow in unsafe UEFI variable handling. Recommendations For Phoenix SecureCore for Intel Gemini Lake versions...
Intel Graphics Command Center Service Software May 2024 Security Update
Intel has informed HP of a potential security vulnerability in some Intel® Graphics Command Center Service software bundled in some Intel® Graphics Windows DCH driver software, which might allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability...
PT-2024-3672 · Siemens · Solid Edge
Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to V224.0 Update 2 Description: A heap-based buffer overflow issue has been identified in the application while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the...
Intel® Neural Compressor Software Advisory
Summary: Potential security vulnerabilities in some Intel® Neural Compressor software may allow escalation of privilege and information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-22476 Description: Improper...
Intel® CBI Software Advisory
Summary: A potential security vulnerability in some Intel® Code Base Investigator CBI software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-43745 Description: Improper input validation in some...
Intel® Inspector Software Advisory
Summary: A potential security vulnerability in some Intel® Inspector software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-22379 Description: Uncontrolled search path in some Intel® Inspecto...
Intel® PCM Software Advisory
Summary: A potential security vulnerability in some Intel® Performance Counter Monitor PCM software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21818 Description: Uncontrolled search path i...
Intel® XTU Software Advisory
Summary: A potential security vulnerability in some Intel® Extreme Tuning Utility XTU software may allow escalation of privilege . Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21835 Description: Insecure inherited permissions in some...
Intel® Advisor Software Advisory
Summary: A potential security vulnerability in some Intel® Advisor software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21772 Description: Uncontrolled search path in some Intel® Advisor...
CVE-2024-34353 matrix-sdk-crypto contains a log exposure of private key of the server-side key backup
The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides ...
PT-2024-4835 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 Description: A privacy issue was addressed with improved client ID handling for alternative app marketplaces. The issue is related to the MarketplaceKit component and its lack of...
PT-2024-22054 · Apple · Macos Sonoma +7
Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17.5 visionOS versions prior to 1.2 iOS versions prior to 17.5 iPadOS versions prior to 17.5 watchOS versions prior to 10.5 macOS Sonoma versions prior to 14.5 Description: An out-of-bounds write issue was addressed wit...
PT-2024-22045 · Apple · Macos Sonoma +5
Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.5 iPadOS versions prior to 17.5 tvOS versions prior to 17.5 watchOS versions prior to 10.5 macOS Sonoma versions prior to 14.5 Description: The issue was addressed with improved memory handling. An app may be able to...
JVN#28869536: Multiple vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Improper handling of data in Mail CWE-231 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Base Score 4.9 CVE-2024-31397 CyVDB-3167 Improper restriction on the output of some API CWE-201...
SUSE-SU-2024:1591-1 Security update for python-Werkzeug
This update for python-Werkzeug fixes the following issues: - CVE-2024-34069: Fixed a remote code execution through debugger when interacting with attacker controlled domain bsc1223979...
SUSE-SU-2024:1588-1 Security update for go1.21
This update for go1.21 fixes the following issues: Update to go1.21.10: - CVE-2024-24787: cmd/go: arbitrary code execution during build on darwin bsc1224017 - net/http: TestRequestLimit/h2 becomes significantly more expensive and slower after x/[email protected]...