Lucene search
+L

10897 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/10 12:00 a.m.•9 views

CVE-2022-40972: Improper Access Control

Improper access control in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/05/10 12:00 a.m.•7 views

CVE-2022-41621: Improper Access Control

Improper access control in some IntelR QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•7 views

PT-2023-36683

Уязвимость функции sdma v4 0 hw fini модуля drivers/gpu/drm/amd/amdgpu/sdma v4 0.c драйвера инфраструктуры прямого рендеринга DRI AMD GPU ядра операционной системы Linux связана с неправильным отключением или освобождением ресурса. Эксплуатация уязвимости может позволить нарушителю вызвать отказ ...

4.6CVSS0.00205EPSS
SaveExploits0References17
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•10 views

PT-2023-14035

Name of the Vulnerable Software and Affected Versions IntelR QAT drivers for Windows versions prior to 1.9.0 Description The issue is related to incorrect permission assignment for a critical resource in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially...

6.5CVSS0.00178EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/05/10 12:00 a.m.•10 views

PT-2023-14018

Name of the Vulnerable Software and Affected Versions IntelR QAT drivers for Windows versions prior to 1.9.0 Description The issue is related to incorrect permission assignment for a critical resource in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially...

8.2CVSS5.9AI score0.00173EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/05/10 12:00 a.m.•17 views

Intel(R) QAT Engine security vulnerability

Intel QAT Drivers is a driver from Intel Corporation USA. A security vulnerability exists in IntelR QAT Engine for OpenSSL prior to version 0.6.16. An attacker can exploit the vulnerability to escalate privileges...

8.8CVSS7.9AI score0.00611EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2023/05/09 10:04 a.m.•15 views

kernel: use-after-free after failed devlink reload in devlink_param_get

A flaw was found in the Netlink device interface implementation in the Linux kernel that improperly handled certain error conditions, leading to a use-after-free issue with some network device drivers. A local attacker with admin access to the network device could use this to cause a denial of...

7.8CVSS7AI score0.00348EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2023/05/09 10:01 a.m.•29 views

kernel: vmwgfx: out-of-bounds write in vmw_kms_cursor_snoop

An out-of-bounds memory write vulnerability was found in the Linux kernel's vmwgfx driver in vmwkmscursorsnoop due to a missing check of a memcpy length. This flaw allows a local, unprivileged attacker with access to either the /dev/dri/card0 or /dev/dri/rendererD128 and able to issue an ioctl on...

6.3CVSS6.4AI score0.00785EPSS
SaveExploits0References4
Intel
Intel
•added 2023/05/09 12:00 a.m.•48 views

Intel® QAT Advisory

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT drivers for Windows may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-41699...

8.2CVSS5.9AI score0.00178EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/05/08 12:00 a.m.•5 views

PT-2023-36586

Уязвимость функции qedf alloc global queues модуля drivers/scsi/qedf/qedf main.c драйвера устройств SCSI ядра операционной системы Linux связана с разыменованием указателей. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

4.6CVSS5.8AI score0.00205EPSS
SaveExploits0References18
BDU FSTEC
BDU FSTEC
•added 2023/05/04 12:00 a.m.•25 views

Windows ODBC OLE DB Code Execution

The vulnerability of ODBC and OLE DB drivers in the Windows operating system exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS7.7AI score0.00695EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2023/05/01 12:00 a.m.•4 views

PT-2023-4321

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free vulnerability was found in the cyttsp4 core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rearming of the watchdog timer...

9.8CVSS0.002EPSS
SaveExploits0
NVD
NVD
•added 2023/04/28 10:15 p.m.•38 views

CVE-2023-25496

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

7.8CVSS7.8AI score0.00167EPSS
SaveExploits0References1
Prion
Prion
•added 2023/04/28 10:15 p.m.•27 views

Privilege escalation

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

4.3CVSS7.8AI score0.00167EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/04/28 9:13 p.m.•33 views

CVE-2023-25496

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

7.8CVSS8AI score0.00167EPSS
SaveExploits0References1
CVE
CVE
•added 2023/04/28 9:13 p.m.•86 views

CVE-2023-25496

CVE-2023-25496 concerns Lenovo Driver Manager (Lenovo Drivers Management). The connected records confirm a local privilege escalation vulnerability that could allow a local user to execute code with elevated privileges. The NVD/PSIRT metrics assign CVSSv3.1: AV:L, AC:L, PR:L, UI:N, S:U, C/H, I/H,...

7.8CVSS7.8AI score0.00167EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/04/28 9:13 p.m.•19 views

CVE-2023-25496

A privilege escalation vulnerability was reported in Lenovo Drivers Management Lenovo Driver Manager that could allow a local user to execute code with elevated privileges...

7.8CVSS7.8AI score0.00167EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/04/28 12:00 a.m.•21 views

Lenovo Drivers Management has a security vulnerability

Lenovo Drivers Management is a driver management application for Lenovo products from the Chinese company Lenovo. The program is mainly used for driver installation and upgrading, among other things. A security vulnerability exists in Lenovo Drivers Management. A local attacker can exploit this...

7.8CVSS7.6AI score0.00167EPSS
SaveExploits0References2
osv_clsa
osv_clsa
•added 2023/04/27 2:26 p.m.•33 views

CLSA-2023-1682605601 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

7.8CVSS6.9AI score0.05095EPSS
SaveExploits17References1
osv_clsa
osv_clsa
•added 2023/04/27 2:09 p.m.•57 views

CLSA-2023-1682604577 Fix of 53 CVEs

CVE-2022-1198 - drivers: hamradio: 6pack: fix UAF bug caused by modtimer Bionic update: upstream stable patchset 2022-03-04 LP: 1963717 // CVE-2020-36516 - ipv4: avoid using shared IP generator for connected sockets CVE-2022-36879 - xfrm: xfrmpolicy: fix a possible double xfrmpolsput in...

7.8CVSS6.9AI score0.05095EPSS
SaveExploits17References1
Rows per page
Query Builder