Intel Glorp 代码问题漏洞

Intel Glorp is a U.S. Intel Intel application. Intel Glorp version 1.0.0 contains an elevation of privilege vulnerability, which originates from an uncontrolled search path element in the IntelR Glorp software and can be exploited by attackers for local elevation of privilege...

PT-2022-5484 · Unknown · Vport P06-1Mp-M12 +1

Name of the Vulnerable Software and Affected Versions: VPort P16-1MP-M12, VPort P16-1MP-M12-IR, VPort P06-1MP-M12 affected versions not specified Description: The issue is related to the use of uncontrolled format strings in the RTSP service of the IP camera microprogram. Exploitation of this iss...

PT-2022-18276 · Intel · Intel Quartus Prime Standard

Name of the Vulnerable Software and Affected Versions: IntelR Quartus Prime Standard edition software versions prior to 21.1 Patch 0.02std Description: The issue is related to an uncontrolled search path element, which may allow an authenticated user to potentially enable escalation of privilege...

PT-2022-20171 · Intel · Intel Glorp

Name of the Vulnerable Software and Affected Versions: IntelR Glorp software affected versions not specified Description: The issue is related to an uncontrolled search path element in the IntelR Glorp software, which may allow an authenticated user to potentially enable escalation of privilege v...

Intel VTune Profiler 代码问题漏洞

Intel VTune Profiler is a performance testing tool for optimized software from Intel USA. The software performs performance testing of IoT embedded applications, media software, Java applications, and high-performance computing applications. A security vulnerability exists in Intel VTune Profiler...

PT-2022-20235 · Intel · Intel(R) Support Android

Name of the Vulnerable Software and Affected Versions: IntelR Support Android application versions prior to 22.02.28 Description: The issue is related to uncontrolled resource consumption, which may allow an authenticated user to potentially enable denial of service via local access...

PT-2022-18542 · Intel · Intel Advanced Link Analyzer Standard +1

Name of the Vulnerable Software and Affected Versions: IntelR Advanced Link Analyzer Pro versions prior to 22.2 IntelR Advanced Link Analyzer Standard edition software versions prior to 22.1.1 STD Description: The issue is related to an uncontrolled search path element, which may allow an...

PT-2022-23340 · Intel · Intel Nuc Kit Wireless Adapter Drivers

Name of the Vulnerable Software and Affected Versions: Intel NUC Kit Wireless Adapter drivers for Windows 10 versions prior to 22.40 Description: The issue is related to an uncontrolled search path in the installer software for some Intel NUC Kit Wireless Adapter drivers. This may allow an...

Design/Logic Flaw

An uncontrolled resource consumption issue when parsing URLs in GitLab CE/EE affecting all versions prior to 15.3.5, 15.4 prior to 15.4.4, and 15.5 prior to 15.5.2 allows an attacker to cause performance issues and potentially a denial of service on the GitLab instance...

CVE-2022-43310

An Uncontrolled Search Path Element in Foxit Software released Foxit Reader v11.2.118.51569 allows attackers to escalate privileges when searching for DLL libraries without specifying an absolute path...

CVE-2022-43310

Foxit Reader v11.2.118.51569 is affected by CVE-2022-43310 due to an Uncontrolled Search Path Element when searching for DLL libraries without an absolute path. This local privilege-escalation vulnerability can allow an attacker to gain high impact on confidentiality, integrity, and availability....

The vulnerability of the Client Server Run-Time Subsystem (CSRSS) in the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Client Server Run-Time Subsystem CSRSS in the Windows operating system is related to an uncontrolled DLL search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

PT-2022-24260 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions prior to 15.3.5 GitLab CE/EE version 15.4 prior to 15.4.4 GitLab CE/EE version 15.5 prior to 15.5.2 Description: An uncontrolled resource consumption issue when parsing URLs allows an attacker to cause performance issues...

CVE-2022-34825

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

Code injection

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

CVE-2022-34825

Uncontrolled Search Path Element in CLUSTERPRO X 5.0 for Windows and earlier, EXPRESSCLUSTER X 5.0 for Windows and earlier, CLUSTERPRO X 5.0 SingleServerSafe for Windows and earlier, EXPRESSCLUSTER X 5.0 SingleServerSafe for Windows and earlier allows a remote unauthenticated attacker to overwrit...

Intel® Support Android App Advisory

Summary: Potential security vulnerabilities in the Intel® Support Android application may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-30691 Description: Uncontrolle...

Multi Step upgrades introduce security risk

Lines of code Vulnerability details Impact If Governor upgrades the system using executeDiamondCutProposal function then freezing is removed. This could be a problem where Governor was still not ready to make freezable facet available as shown in POC Proof of Concept 1. Governor discovers a...

CVE-2022-34825

The CVE-2022-34825 issue affects CLUSTERPRO X (5.0 and earlier), EXPRESSCLUSTER X (5.0 and earlier), CLUSTERPRO X SingleServerSafe (5.0 and earlier), and EXPRESSCLUSTER X SingleServerSafe (5.0 and earlier). It stems from an uncontrolled search path element in these products. The vulnerability all...

PT-2023-5862 · Git · Git For Windows

Name of the Vulnerable Software and Affected Versions: Git for Windows versions prior to 2.40.1 Description: The issue is related to an Uncontrolled Search Path Element vulnerability. It affects users of Git CMD who start the command in an untrusted directory, allowing maliciously-placed doskey.e...