CVE-2024-37181

The CVE-2024-37181 issue affects Intel® Neural Compressor software before version v3.0. It is a time-of-check time-of-use race condition that can allow an authenticated user to potentially disclose information via adjacent access. The advisory and multiple security feeds confirm the affected comp...

Intel Neural Compressor 安全漏洞

Intel Neural Compressor is an open source project from Intel Corporation USA designed to help developers easily optimize AI models. A security vulnerability exists in versions prior to Intel Neural Compressor v3.0 that stems from the presence of a competitive condition that could allow...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor allows attackers to exploit it by bypassing security measures related to SQL query structures, thereby enabling them to enhance their privileges.

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor allows attackers to exploit it to increase their privileges. This vulnerability stems from insufficient validation of input data.

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

The vulnerability of the library for optimizing machine learning models in Intel Neural Compressor lies in the failure to take measures to neutralize special elements in the template creation mechanism. This allows attackers to enhance their privileges.

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to the lack of measures taken to neutralize special elements in the template creation mechanism. Exploiting this vulnerability can allow a remote attacker to enhance their privileges...

Intel Neural Compressor < 3.0 Multiple Vulnerabilities

The version of Intel Neural Compressor installed on the remote host is prior to 3.0. It is, therefore, affected by the following: - Improper neutralization of special elements used in an SQL command 'SQL Injection' in some Intel Neural Compressor software before version v3.0 may allow an...

The vulnerability of the library for optimizing machine learning models, Intel Neural Compressor, related to errors in processing input data, allows attackers to exploit it to gain increased privileges.

The vulnerability of the Intel Neural Compressor library for optimizing machine learning models is related to errors in processing input data. Exploiting this vulnerability can allow attackers to enhance their privileges remotely...

CVE-2024-39766

Improper neutralization of special elements used in SQL command in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39368

Improper neutralization of special elements used in an SQL command 'SQL Injection' in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-36284

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-36284

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-36284

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-36284

Intel Neural Compressor is affected on versions prior to v3.0 due to improper input validation, enabling potential privilege escalation via adjacent access for authenticated users.Impact is described as elevated privileges with adjacent access; exploitation status is not detailed in the provided ...

CVE-2024-39766

Improper neutralization of special elements used in SQL command in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39766

Summary: CVE-2024-39766 affects Intel Neural Compressor software before version 3.0. The issue is described as improper neutralization of special elements used in an SQL command, which may allow an authenticated user to escalate privileges via local access. Impact (as stated): privilege escalatio...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-28028

CVE-2024-28028 affects Intel® Neural Compressor software prior to version 3.0. The issue is caused by improper input validation, which can allow an unauthenticated user to potentially escalate privileges via adjacent access. The advisory from Intel lists this CVE and notes mitigations through upd...

CVE-2024-39368

Improper neutralization of special elements used in an SQL command 'SQL Injection' in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...