CVE-2023-27513

Uncontrolled search path element in some IntelR Server Information Retrieval Utility software before version 16.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34430

CVE-2023-34430 affects Intel Battery Life Diagnostic Tool software prior to version 2.2.1. The issue is an uncontrolled search path vulnerability in the tool, which may allow an authenticated user to escalate privileges via local access. Intel’s advisory (INTEL-SA-00843) confirms the vulnerabilit...

CVE-2023-34430

Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29161

Uncontrolled search path in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29161

Uncontrolled search path in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29161

CVE-2023-29161 concerns Intel® OFU (One Boot Flash Update) software prior to version 14.1.31. The Red Hat/RedHat-like and NVD records describe an issue of Uncontrolled search path that may allow an authenticated user to achieve privilege escalation via local access . Intel’s own advisory reiterat...

CVE-2023-25949

Uncontrolled resource consumption in some IntelR Aptio V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-34350

Uncontrolled search path element in some IntelR XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34350

Uncontrolled search path element in some IntelR XTU software before version 7.12.0.15 may allow an authenticated user to potentially enable escalation of privilege via local access...

Ashlar-Vellum Lithium Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Lithium. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing ...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23047)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an...

PT-2023-21930 · Intel · Intel Qat Drivers For Windows

Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows - HW Version 2.0 versions prior to 2.0.4 Description: The issue is related to an uncontrolled search path element in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially enab...

Intel® OFU Software Advisory

Summary: Potential security vulnerabilities in some Intel® One Boot Flash Update OFU software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32204 Description: Improper access control in so...

Ashlar-Vellum Argon Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Argon. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

The vulnerability of the `find_abstract_instance` function in the `bfd/dwarf2.c` component of the GNU Binutils development environment allows a attacker to cause a service failure.

The vulnerability of the findabstractinstance function in the bfd/dwarf2.c component of the GNU Binutils development environment is related to an uncontrolled recursion. Exploiting this vulnerability allows a malicious actor to trigger a service failure using a specially created ELF file...

PT-2023-23940 · Intel · Intel Nuc Kit Nuc6I7Kyk Thunderbolt 3 Firmware Update Tool

Name of the Vulnerable Software and Affected Versions: IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update Tool versions prior to 46 Description: The issue is related to an uncontrolled search path in the installation software of the IntelR NUC Kit NUC6i7KYK ThunderboltTM 3 Firmware Update...

The vulnerability of the libiberty/cp-demangle.c component of the GNU Binutils development environment, related to an uncontrolled recursion, allows a attacker to cause a service failure.

The vulnerability of the libiberty/cp-demangle.c component of the GNU Binutils development environment is related to an uncontrolled recursion. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

PT-2023-22179 · Intel · Intel Ofu

Name of the Vulnerable Software and Affected Versions: IntelR OFU software versions prior to 14.1.31 Description: The issue is related to an uncontrolled search path in some IntelR OFU software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

Ashlar-Vellum Cobalt Uncontrolled Search Path Element Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ashlar-Vellum Cobalt. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

The vulnerability of the RAID array management tool Mdadm, related to uncontrolled resource consumption, allows a hacker to cause a service failure.

The vulnerability of the RAID array management tool Mdadm is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a hacker to cause a service failure...