2015 matches found
CVE-2022-21128
Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-21128
Insufficient control flow management in the IntelR Advisor software before version 7.6.0.37 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2022-21128
CVE-2022-21128 affects Intel® Advisor prior to version 7.6.0.37. The issue is insufficient control flow management that may allow an authenticated user to escalate privileges via local access. CVSSv3.1 metrics shown in the connected records indicate a local, low-privilege, non‑interactive vector ...
Intel Advisor 安全漏洞
Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A security vulnerability exists in Intel Advisor versions prior to 7.6.0.37, which stems from inadequate control flow management. The vulnerability can be exploited by an authenticated use...
CVE-2021-33122: Undefined Security Weakness
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
2020.2 IPU – Intel® CSME, SPS, TXE, and AMT Advisory
Summary: Potential security vulnerabilities in Intel® Converged Security and Manageability Engine CSME, Server Platform Services SPS, Intel® Trusted Execution Engine TXE, Intel® Dynamic Application Loader DAL, Intel® Active Management Technology AMT, Intel® Standard Manageability ISM and Intel®...
Intel Memory Bug Poses Risk for Hundreds of Products
Chipmaker Intel is reporting a memory bug impacting microprocessor firmware used in “hundreds” of products. According to an advisory issued by the company on Tuesday, the bug is firmware-based and rated as “high” risk with a Common Vulnerability Scoring System CVSS score of 7. The vulnerability...
Intel BIOS firmware 安全漏洞
Intel BIOS firmware is a set of programs from the U.S. company Intel that are solidified onto a ROM chip on the motherboard inside a computer. A security vulnerability exists in the Intel BIOS firmware, which stems from inadequate control flow management in the BIOS firmware, and can be exploited...
Security Bulletin: Multiple Vulnerabilities in Intel Processors affect Cloud Pak System
Summary Multiple Vulnerabilities in Intel Processors affect Cloud Pak System. Cloud Pak System has addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2020-8700 DESCRIPTION: Intel Processors could allow a local authenticated attacker to gain elevated privileges on the system, caused...
CVE-2022-23457: Improper Limitation of a Pathname to a Restricted Directory
ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of Validator.getValidDirectoryPathString, String, File, boolean may incorrectly treat the tested input string as a child of the specified...
CVE-2022-23457
ESAPI The OWASP Enterprise Security API is a free, open source, web application security control library. Prior to version 2.3.0.0, the default implementation of "Validator.getValidDirectoryPathString, String, File, boolean" may incorrectly treat the tested input string as a child of the specifie...
PT-2022-3553
Name of the Vulnerable Software and Affected Versions ESAPI versions prior to 2.3.0.0 Description The default implementation of Validator.getValidDirectoryPathString, String, File, boolean may incorrectly treat the tested input string as a child of the specified parent directory. This potentially...
CVE-2021-44486
An issue was discovered in YottaDB through r1.32 and V7.0-000. Using crafted input, attackers can manipulate the value of a function pointer used in opwrite in srport/opwrite.c in order to gain control of the flow of execution...
USN-5375-1: GNU cflow vulnerability
It was discovered that GNU cflow was incorrectly handling memory cleanup operations at the end of a compilation module. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...
CVE-2021-33061
A denial of service flaw was found in the Linux kernel due to insufficient control flow management for the IntelR 82599 Ethernet Controllers and Adapters. This flaw allows a locally authenticated user to potentially cause a denial of service. The highest threat from this vulnerability is to syste...
Intel CPU vulnerability CVE-2021-0099
Insufficient control flow management in the firmware for some IntelR Processors may allow an authenticated user to potentially enable an escalation of privilege via local access. CVE-2021-0099 Impact An attacker may be able to exploit the Intel processor firmware to gain elevated access to...
Intel CPU vulnerability CVE-2021-0103
Insufficient control flow management in the firmware for some IntelR Processors may allow a privileged user to potentially enable an escalation of privilege via local access. CVE-2021-0103 Impact An attacker may be able to exploit the Intel processor firmware to gain elevated access to resources...
Stable Channel Update for Desktop
The Stable channel has been updated to 99.0.4844.74 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...
Denial Of Service (DoS)
intel-microcode is vulnerable to denial of service DoS attacks. Insufficient control flow management in some IntelR Processors may allow an authenticated user to potentially enable a denial of service via local access...
SUSE-SU-2022:0576-1 Security update for ucode-intel
This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20220207 release. - CVE-2021-0146: Fixed a potential security vulnerability in some Intel Processors may allow escalation of privilege bsc1192615 - CVE-2021-0127: Intel Processor Breakpoint Control Flow...