PT-2025-6660

Name of the Vulnerable Software and Affected Versions: IntelR Advisor versions prior to 2024.2 Description: The issue concerns an uncontrolled search path in some IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-6626 · Intel · Intel Ethernet Adapter Complete Driver Pack

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Adapter Complete Driver Pack versions prior to 29.1 Description: The issue is related to an uncontrolled search path in some installations of the IntelR Ethernet Adapter Complete Driver Pack. This could potentially allow an...

PT-2025-6633

Name of the Vulnerable Software and Affected Versions IntelR QuickAssist Technology software versions prior to 2.2.0 Description The issue is related to an uncontrolled search path in some IntelR QuickAssist Technology software. This could potentially allow an authenticated user to enable...

PT-2025-6649 · Intel · Intel Thread Director Visualizer

Name of the Vulnerable Software and Affected Versions: IntelR Thread Director Visualizer version 1.0.0 Description: The issue concerns an uncontrolled search path in the IntelR Thread Director Visualizer software. This could potentially allow an authenticated user to enable escalation of privileg...

PT-2025-6640 · Intel · Intel Mpi Library

Name of the Vulnerable Software and Affected Versions: IntelR MPI Library for Windows versions prior to 2021.13 Description: The issue concerns an uncontrolled search path in some IntelR MPI Library for Windows software. This could potentially allow an authenticated user to enable escalation of...

PT-2025-6648 · Intel · Intel High Level Synthesis Compiler

Name of the Vulnerable Software and Affected Versions: IntelR High Level Synthesis Compiler versions prior to 24.2 Description: The issue is related to an uncontrolled search path in some IntelR High Level Synthesis Compiler software. This may allow an authenticated user to potentially enable...

PT-2025-6683 · Intel · Intel Server M50Fcp

Name of the Vulnerable Software and Affected Versions: IntelR Server M50FCP family versions prior to R01.02.0002 Description: The issue is related to an uncontrolled search path element in some BIOS and System Firmware Update Packages. This could potentially allow a privileged user to enable...

Security Bulletin: Denial of Service vulnerability in Apache Commons IO affects IBM Business Automation Workflow - CVE-2024-47554

Summary IBM Business Automation Workflow packages a vulnerable version of Apache Commons IO. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Apache Commons IO is vulnerable to a denial of service, caused by an uncontrolled resource consumption flaw in the...

Security Bulletin: Due to the use of Apache Commons IO, IBM WebSphere eXtreme Scale Liberty Deployment is vulnerable to an Uncontrolled Resource Consumption vulnerability

Summary YAJSW service is used for registering XSLD services with operating system. commons-io-2.11.0.jar bundled in YAJSW is vulnerable to CVE-2024-47554. This is fixed in yajsw-stable-13.13. Applying ifix PH65060 will upgrade YAJSW to 13.13 version. Vulnerability Details CVEID:CVE-2024-47554...

Netplex Json-smart Uncontrolled Recursion vulnerability

A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service DoS. This issue exists because of an incomplete fix for...

CVE-2022-43740

IBM Security Verify Access OIDC Provider could allow a remote user to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 238921...

The vulnerability of the software for managing business processes in IBM Cognos Dashboards in Cloud Pak for Data lies in an uncontrolled element of the search process, allowing a perpetrator to increase their privileges.

The vulnerability of the IBM Cognos Dashboards management software in Cloud Pak for Data is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a malicious actor to increase their privileges...

CVE-2022-1699

Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications...

CVE-2022-1824

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow a local attacker to perform a sideloading attack by using a specific file name. This could result in the user gaining elevated permissions and being able to execute arbitrary co...

Security Bulletin: Vulnerability in Apache Commons IO affects IBM watsonx Assistant for IBM Cloud Pak for Data

Summary Potential vulnerability in Apache Commons IO has been identified that affects IBM watsonx Assistant for IBM Cloud Pak for Data. The vulnerabilities have been addressed. Refer to details for additional information. Vulnerability Details CVEID:CVE-2024-47554 DESCRIPTION: Uncontrolled Resour...

CVE-2022-4956

A vulnerability classified as critical has been found in Caphyon Advanced Installer 19.7. This affects an unknown part of the component WinSxS DLL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The exploit has been disclosed to the public and may ...

CVE-2022-40513

Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state...

CVE-2020-11090

In Indy Node 1.12.2, there is an Uncontrolled Resource Consumption vulnerability. Indy Node has a bug in TAA handling code. The current primary can be crashed with a malformed transaction from a client, which leads to a view change. Repeated rapid view changes have the potential of bringing down...

CVE-2024-43064

Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU...

CVE-2024-7325

A vulnerability was found in IObit Driver Booster 11.0.0.0. It has been rated as critical. Affected by this issue is some unknown functionality in the library VCL120.BPL of the component BPL Handler. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The...