AMD Manageability API 安全漏洞

The AMD Manageability API is an enterprise-class hardware management interface suite from UltraMicroelectronics AMD that provides out-of-band server management capabilities. A security vulnerability exists in the AMD Manageability API that stems from improperly set default permissions, which coul...

Intel RealSense SDK 代码问题漏洞

Intel RealSense SDK is a depth-aware camera development kit from Intel Corporation USA that supports 3D vision application development. A code issue vulnerability exists in Intel RealSense SDK versions prior to 2.56.2, which stems from improperly controlled search paths and could lead to elevatio...

Intel Tiber Edge Platform Edge Orchestrator 安全漏洞

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. A security vulnerability exists in Intel Tiber Edge Platform Edge Orchestrator that stems from improper privilege assignment and could lead to elevated...

Intel Core Ultra Processors 安全漏洞

Intel Core Ultra Processors is a Core series central processing unit CPU from Intel Corporation USA. A security vulnerability exists in Intel Core Ultra Processors that stems from improper locking and could lead to elevation of privilege...

Intel Server M50FCP和Intel Server D50DNP 安全漏洞

Intel Server M50FCP and Intel Server D50DNP are both servers from Intel Corporation USA. A security vulnerability exists in Intel Server M50FCP and Intel Server D50DNP that stems from a UEFI firmware SmiVariable driver contention condition that could result in elevated privileges...

Intel Network Adapters 代码问题漏洞

Intel Network Adapters is a family of adapters from Intel Corporation USA. A code issue vulnerability exists in Intel Network Adapters versions prior to 11 29.4, which stems from insufficient search path control and could lead to elevation of privilege...

Intel oneAPI Level Zero 代码问题漏洞

Intel oneAPI Level Zero is an underlying heterogeneous computing interface standard from Intel Corporation USA that provides direct hardware access to Intel GPUs/FPGAs. A code issue vulnerability exists in Intel oneAPI Level Zero that stems from an uncontrolled search path that could lead to loca...

Intel Tiber Edge Platform Edge Orchestrator 安全漏洞

Intel Tiber Edge Platform Edge Orchestrator is an enterprise-class edge computing orchestration management platform from Intel Corporation USA. A security vulnerability exists in Intel Tiber Edge Platform Edge Orchestrator that stems from improper privilege assignment and could lead to elevation ...

Intel Advisor 代码问题漏洞

Intel Advisor is a design and analysis tool for developing high-performance code from Intel Corporation USA. A code issue vulnerability exists in Intel Advisor that stems from an improperly controlled search path that could lead to elevation of privilege...

Centreon 安全漏洞

Centreon is a set of open source system monitoring tools from France's Centreon. The product mainly provides monitoring functions for resources such as network, system and application programs. Centreon suffers from a security vulnerability that is exploited by attackers to cause elevation of...

Security Updates for Microsoft SharePoint Server Subscription Edition (May 2025)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability CVE-2025-29976 - Remote Code Execution Vulnerabilites. CVE-2025-30378, CVE-2025-30382,...

Intel Xeon 6 Processor 访问控制错误漏洞

The Intel Xeon 6 Processor is a new generation of server processors from Intel aimed at data centers, artificial intelligence AI and high performance computing HPC. The Intel Xeon 6 Processor suffers from an improper access control vulnerability that stems from improper access control of the memo...

PT-2025-20937 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: A heap-based buffer overflow issue in the Windows Kernel allows an authorized attacker to elevate privileges locally. This elevation-of-privilege issue can affect the system...

PT-2025-20997 · Microsoft · Azure

Name of the Vulnerable Software and Affected Versions: Azure affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'path traversal', which allows an unauthorized attacker to elevate privileges over a network...

Intel Graphics 安全漏洞

Intel Graphics is a family of graphics cards from Intel Corporation USA. A security vulnerability exists in Intel Graphics that stems from an improperly set default privilege, which could lead to local elevation of privilege...

Intel Graphics 代码问题漏洞

Intel Graphics is a family of graphics cards from Intel Corporation USA. A code issue vulnerability exists in Intel Graphics that stems from an improperly controlled search path that could lead to elevation of privilege...

KLA83574 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure File Sync can be exploited remotely to gain privileges. 2. An...

PT-2025-20943 · Microsoft · Windows Hardware Lab Kit

Name of the Vulnerable Software and Affected Versions: Windows Hardware Lab Kit affected versions not specified Description: The issue concerns the use of hard-coded credentials in the software, which allows an authorized attacker to elevate privileges locally. There is no information provided...

Security Updates for Microsoft SharePoint Server 2016 (May 2025)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability CVE-2025-29976 - Remote Code Execution Vulnerabilites. CVE-2025-30378, CVE-2025-30382, CVE-2025-30384...

CVE-2025-31222

Technical details (affected component, root cause, impact, vulnerable versions, and fixes) are not publicly provided in the connected documents; monitor for official advisories for updates.