Siemens SICAM PQ Analyzer Unquoted Search Path or Element (CVE-2021-45460)

A vulnerability has been identified in SICAM PQ Analyzer All versions V3.18. A service is started by an unquoted registry entry. As there are spaces in this path, attackers with write privilege to those directories might be able to plant executables that will run in place of the legitimate proces...

PT-2023-2004 · Hitachi · Hitachi Ops Center Analyzer

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.9.0-00 through 10.9.0-00 Description: The issue is related to incorrect default permissions in the Hitachi Ops Center Analyzer RAID Agent component, allowing local users to read and write specific files...

PT-2023-2005 · Hitachi · Hitachi Ops Center Analyzer +1

Name of the Vulnerable Software and Affected Versions: Hitachi Infrastructure Analytics Advisor versions 2.0.0-00 through 4.4.0-00 Hitachi Ops Center Analyzer versions 10.0.0-00 through 10.9.0-00 Description: The issue is related to improper certificate validation, which allows a Man in the Middl...

ManageEngine Firewall Analyzer REST API Key Disclosure (CVE-2022-36923)

Binary data manageenginefirewallanalyzercve-2022-36923direct.nbin...

Fantastic RPC Interfaces and How to Find Them

Looking for your next security research project? Our RPC Interface Analyzer tool can help you find it...

The vulnerability of ClamAV’s HFS+ partition analyzer allows a hacker to execute arbitrary code.

The vulnerability of ClamAV’s HFS+ partition analyzer relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2022-34843

Integer overflow in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32575

Out-of-bounds write in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32575

Out-of-bounds write in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34843

Integer overflow in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34864

Out-of-bounds read in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34864

Out-of-bounds read in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Out-of-bounds read in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

Integer overflow

Integer overflow in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26062

Uncontrolled search path element in the IntelR Trace Analyzer and Collector before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-26062

Uncontrolled search path element in the IntelR Trace Analyzer and Collector before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in the IntelR Trace Analyzer and Collector before version 2021.6 for IntelR oneAPI HPC Toolkit may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34864

CVE-2022-34864 describes an out-of-bounds read in Intel’s Trace Analyzer and Collector software prior to version 2021.5 that may allow an authenticated user to escalate privileges via local access. The vulnerability is within Intel Trace Analyzer and Collector (ITAC) before 2021.5, with an impact...

CVE-2022-32575

Out-of-bounds write in the IntelR Trace Analyzer and Collector software before version 2021.5 may allow an authenticated user to potentially enable escalation of privilege via local access...