PT-2024-31621 · Zoom · Zoom Apps

Name of the Vulnerable Software and Affected Versions: Zoom Apps affected versions not specified Description: The issue is related to improper input validation in some Zoom Apps, which may allow an unauthenticated user to disclose information via network access. Recommendations: At the moment,...

ITG Computer vSRM Supplier Relationship Management System 跨站脚本漏洞

ITG Computer vSRM Supplier Relationship Management System is a supplier relationship management system from ITG Computer. A cross-site scripting vulnerability exists in ITG Computer vSRM Supplier Relationship Management System versions prior to 28.08.2024, which stems from improper input...

VaeMendis Ubooquity 跨站脚本漏洞

VaeMendis Ubooquity is a free, lightweight and easy-to-use home server from VaeMendis. VaeMendis Ubooquity suffers from a cross-site scripting vulnerability that stems from an improper neutralization of input during web page generation, resulting in a cross-site scripting vulnerability...

CVE-2024-37027

Improper Input validation in some IntelR VTuneTM Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-33624

Improper input validation for some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-36284

Intel Neural Compressor is affected on versions prior to v3.0 due to improper input validation, enabling potential privilege escalation via adjacent access for authenticated users.Impact is described as elevated privileges with adjacent access; exploitation status is not detailed in the provided ...

CVE-2024-28028

Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2024-36482

CVE-2024-36482 : Improper input validation in some Intel® CIP software before version 2.4.10852 may allow a privileged user to escalate privileges via local access. Intel’s advisory (Intel® CIP Software) confirms affected product: Intel® CIP software prior to 2.4.10852. Base/impact metrics from m...

CVE-2024-33611

Improper input validation for some IntelR PROSet/Wireless WiFi software for Windows before version 23.60 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-33624

CVE-2024-33624: Intel PROSet/Wireless WiFi software for Windows before version 23.60 has improper input validation, potentially allowing an unauthenticated user to cause a denial of service via network access. Affected software includes Intel PROSet/WiFi drivers for Windows and related Intel Wi‑F...

CVE-2024-32048

Improper input validation in the IntelR Distribution of OpenVINOTM Model Server software before version 2024.0 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-32485

CVE-2024-32485 concerns Intel VROC software: improper input validation may allow an authenticated local attacker to cause a denial of service. Affected are Intel VROC versions prior to 8.6.0.2003. The issue is documented across multiple sources, including PT-2024-24609 and Red Hat/Intel advisorie...

CVE-2024-23198

Improper input validation in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access...

CVE-2024-23198

Improper input validation in firmware for some IntelR PROSet/Wireless Software and IntelR KillerTM Wi-Fi products before version 23.40 may allow an unauthenticated user to enable denial of service via adjacent access...

CVE-2024-31337

In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-9477

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in AirTies Air4443 Firmware allows Cross-Site Scripting XSS. This issue affects Air4443 Firmware: through 14102024. NOTE: The vendor was contacted and it was learned that the product classified...

Security Bulletin: Multiple Vulnerabilities in IBM Event Endpoint Management

Summary Multiple vulnerabilities were addressed in IBM Event Endpoint Management version 11.3.2 Vulnerability Details CVEID:CVE-2024-47176 DESCRIPTION: OpenPrinting cups-browsed could allow a remote attacker to obtain sensitive information, caused by the binding on UDP INADDRANY:631 and trusting...

CVE-2024-8936

CWE-20: Improper Input Validation vulnerability exists that could lead to loss of confidentiality of controller memory after a successful Man-In-The-Middle attack followed by sending a crafted Modbus function call used to tamper with memory...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the American company Google. Google Android suffers from a security vulnerability that stems from improper input validation. An attacker can exploit the vulnerability to elevate privileges...

PT-2024-25383 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software for Windows versions prior to 23.60 Description: The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via network access...