CVE-2022-21174

CVE-2022-21174 involves improper access control in a third-party component used by Intel® Quartus® Prime Pro Edition prior to version 21.3, enabling a locally authenticated user to potentially escalate privileges. The vulnerability is documented across multiple sources (NVD, Red Hat, Intel adviso...

CVE-2022-21204: Incorrect Default Permissions

Improper permissions for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-11091 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE versions 14.1 through 14.3.5 GitLab EE versions 14.4 through 14.4.3 GitLab EE versions 14.5 through 14.5.1 Description: An authorization logic error in the External Status Check API allowed a user to update the status of the check v...

Intel Quartus Prime Pro 输入验证错误漏洞

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. Intel Quartus Prime Pro Edition suffers from an Input Validation Error vulnerability that stems from a potential...

CVE-2021-44454: Improper Input Validation

Improper input validation in a third-party component for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21174: Undefined Security Weakness

Improper access control in a third-party component of IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-14922

Name of the Vulnerable Software and Affected Versions IntelR QuartusR Prime Pro Edition versions prior to 21.3 Description The issue is related to improper permissions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For versio...

CVE-2022-21203: Improper Preservation of Permissions

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Rocky Linux 8 : java-11-openjdk (RLSA-2021:2781)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:2781 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected...

AlmaLinux 8 : java-11-openjdk (ALSA-2021:3891)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3891 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java...

AlmaLinux 8 : java-1.8.0-openjdk (ALSA-2021:2776)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:2776 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected ar...

AlmaLinux 8 : java-17-openjdk (ALSA-2021:4135)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4135 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Swing. Supported versions that are affected are Jav...

Intel Quartus Prime Pro 权限许可和访问控制问题漏洞

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. Intel Quartus Prime Pro Edition is vulnerable to a privilege licensing and access control issue vulnerability that...

CVE-2022-21220: Improper Restriction of XML External Entity Reference

Improper restriction of XML external entity for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2022-14903 · Intel · Intel Quartus Prime Pro Edition

Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition versions prior to 21.3 Description: The issue is related to improper access control in a third-party component, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2022-14921

Name of the Vulnerable Software and Affected Versions IntelR QuartusR Prime Standard Edition versions prior to 21.1 Description The issue is related to improper permissions in the SafeNet Sentinel driver, which may allow an authenticated user to potentially enable escalation of privilege via loca...

PT-2022-12121

Name of the Vulnerable Software and Affected Versions IntelR QuartusR Prime Pro Edition versions prior to 21.3 Description The issue is related to improper input validation in a third-party component, which may allow an authenticated user to potentially enable escalation of privilege via local...

PT-2022-14931

Name of the Vulnerable Software and Affected Versions IntelR QuartusR Prime Pro Edition versions prior to 21.3 Description The issue is related to the improper restriction of XML external entities, which may allow an authenticated user to potentially enable escalation of privilege via local acces...

Security Updates for Microsoft SharePoint Server Subscription Edition (February 2022)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user...

AlmaLinux 8 : java-1.8.0-openjdk (ALSA-2021:3893)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3893 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java...