CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28028

CVE-2024-28028 affects Intel® Neural Compressor software prior to version 3.0. The issue is caused by improper input validation, which can allow an unauthenticated user to potentially escalate privileges via adjacent access. The advisory from Intel lists this CVE and notes mitigations through upd...

CVE-2024-39368

Improper neutralization of special elements used in an SQL command 'SQL Injection' in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-29085

Improper access control for some BigDL software maintained by IntelR before version 2.5.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28049

CVE-2024-28049 affects Intel PROSet/Wireless Software and Intel Killer Wi‑Fi firmware; improper input validation before version 23.40 can allow an unauthenticated, adjacent attacker to trigger a denial of service. Remediation: upgrade to version 23.40 or newer where available (per Intel advisory).

CVE-2024-28049

Improper input validation in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access...

CVE-2024-28049

Improper input validation in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi wireless products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access...

CVE-2024-24984

Improper input validation for some IntelR Wireless BluetoothR products for Windows before version 23.40 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-24984

CVE-2024-24984: Affected component is Intel Wireless Bluetooth on Windows prior to version 23.40. The issue is improper input validation, which may allow an unauthenticated adjacent attacker to cause a denial-of-service. Exploitation details are not provided in the connected documents; no explici...

CVE-2024-23198

Improper input validation in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access...

bluez: OBEX library out-of-bounds read information disclosure vulnerability

A flaw was found within the handling of OBEX protocol parameters in BlueZ. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a...

bluez: avrcp_parse_attribute_list out-of-bounds read information disclosure vulnerability

A flaw was found within the handling of the AVRCP protocol in BlueZ. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect ...

bluez: phone book access profile heap-based buffer overflow remote code execution vulnerability

A flaw was found within the handling of the Phone Book Access profile in BlueZ. In certain conditions, a network-adjacent attacker can execute arbitrary code on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect to a malicio...

bluez: audio profile avrcp parse_media_element out-of-bounds read information disclosure vulnerability

A flaw was found within the handling of the AVRCP protocol in BlueZ. This vulnerability allows network-adjacent attackers to disclose sensitive information via Bluetooth on affected installations of BlueZ. User interaction is required to exploit this vulnerability in that the target must connect ...

CVE-2024-47799

Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain information of the other devices connected through the...

CVE-2024-29075

Active debug code vulnerability exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain or alter the settings of the device...

CVE-2024-45827

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command...

CVE-2024-47799

Exposure of sensitive system information to an unauthorized control sphere issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may obtain information of the other devices connected through the...

CVE-2024-47799

CVE-2024-47799 affects SoftBank/Mesh Wi‑Fi router RP562B (firmware v1.0.2 and earlier). The root cause is exposure of sensitive system information to an authenticated, network-adjacent attacker, enabling access to information about devices connected via Wi‑Fi. Publicly available sources confirm t...

CVE-2024-45827

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in Mesh Wi-Fi router RP562B firmware version v1.0.2 and earlier. If this vulnerability is exploited, a network-adjacent authenticated attacker may execute an arbitrary OS command...