ROS-20250212-13

Vulnerability in the ntpd daemon implementation of the NTP time synchronization protocol is related to insufficient validation of user input during NTP packet processing. user input during NTP packet processing. Exploitation of the vulnerability could allow an attacker acting remotely to cause a...

The vulnerability of the installer for Microsoft Visual Studio allows a hacker to increase their privileges.

The vulnerability of the installer of the Microsoft Visual Studio software is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

CVE-2024-39284

Uncontrolled search path for some IntelR Advisor software before version 2024.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-36291

Uncontrolled search path for some IntelR Chipset Software Installation Utility before version 10.1.19867.8574 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-29223

Uncontrolled search path for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39372

Uncontrolled search path for the IntelR XTU software for Windows before version 7.14.2.14 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39284

CVE-2024-39284 concerns an uncontrolled search path in Intel® Advisor software before version 2024.2, potentially allowing an authenticated user to escalate privileges via local access. Connected sources (Intel advisory INTEL-SA-01208, Red Hat RH:CVE-2024-39284, and related feeds) confirm the aff...

CVE-2024-42492

The CVE-2024-42492 entry applies to the BIOS and System Firmware Update Package for IntelR Server M50FCP family prior to version R01.02.0002. The root cause is an uncontrolled search path element, which could allow a privileged user to escalate privileges via local access. Intel's advisory (INTEL...

Intel oneAPI DPC++/C++ Compiler 代码问题漏洞

Intel oneAPI DPC++/C++ Compiler is a compiler from Intel Corporation USA. A code issue vulnerability exists in Intel oneAPI DPC++/C++ Compiler versions prior to 2024.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to enable elevation of...

Intel Extreme Tuning Utility 代码问题漏洞

Intel Extreme Tuning Utility is a software from Intel Corporation that can increase CPU frequency. In addition to supporting overclocking of CPUs and graphics cards, the software also features system hardware information detection and real-time monitoring of the current system status to ensure...

Intel Advisor 代码问题漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A code issue vulnerability exists in Intel Advisor versions prior to 2024.2 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentiall...

Intel QuickAssist Technology 代码问题漏洞

Intel QuickAssist Technology is an Intel technology that improves server utilization. The technology improves server efficiency by sharing the stress of compute-intensive tasks to equalize server pressure. A code issue vulnerability exists in Intel QuickAssist Technology versions prior to 2.2.0,...

Intel Quartus Prime 代码问题漏洞

Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A code issue vulnerability exists in Intel Quartus Prime versions prior to 23.1.1 Patch 1.01std, which stems from the presence of an uncontrolled search path that could allow an...

Intel MPI Library 代码问题漏洞

Intel MPI Library is a library from Intel Corporation USA. A code issue vulnerability exists in Intel MPI Library versions prior to 2021.13 that stems from the presence of an uncontrolled search path that could allow an authenticated user to potentially enable elevation of privilege via local...

Intel Thread Director Visualizer 代码问题漏洞

Intel Thread Director Visualizer is a desktop application from Intel Corporation USA. It helps end-users visualize CPU utilization and the distribution between P-cores performance cores and E-cores energy-efficient cores for Alder Lake and above platforms. A code issue vulnerability exists in Int...

Intel High Level Synthesis Compiler 代码问题漏洞

Intel High Level Synthesis Compiler is a High Level Synthesis HLS tool from Intel Corporation. A code issue vulnerability exists in Intel High Level Synthesis Compiler prior to version 24.2, which stems from the presence of an uncontrolled search path that could allow an authenticated user to...

Intel RealSense D400 代码问题漏洞

Intel RealSense D400 is a series of real-sense viewers from Intel Corporation USA. A code issue vulnerability exists in Intel RealSense D400 that stems from the presence of an uncontrolled search path that could allow an authenticated user to elevate privileges via local access...

Intel Ethernet Port Configuration Tool 代码问题漏洞

Intel Ethernet Port Configuration Tool Intel EPCT is a command line utility from Intel Corporation that allows users to change the link type of a device. A code issue vulnerability exists in Intel Ethernet Port Configuration Tool versions prior to 1.42.8.0 that stems from the presence of an...

Intel Ethernet Adapter Complete Driver Pack 代码问题漏洞

Intel Ethernet Adapter Complete Driver Pack is a complete driver for Ethernet adapters from Intel Corporation. A code issue vulnerability exists in Intel Ethernet Adapter Complete Driver Pack versions prior to 29.1, which arises from an uncontrolled search path that could allow an authenticated...

PT-2025-6660

Name of the Vulnerable Software and Affected Versions: IntelR Advisor versions prior to 2024.2 Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...