JetBrains Rider security vulnerabilities

JetBrains Rider is a cross-platform .NET integrated development environment IDE from the Czech company JetBrains. A security vulnerability exists in JetBrains Rider versions prior to 2022.2, which stems from the ability to bypass the trust and open project dialogs, which can lead to local code...

CVE-2022-37396: Improper Control of Generation of Code

In JetBrains Rider before 2022.2 Trust and Open Project dialog could be bypassed, leading to local code execution...

PT-2022-23971 · Jetbrains · Jetbrains Rider

Name of the Vulnerable Software and Affected Versions: JetBrains Rider versions prior to 2022.2 Description: The issue allows the Trust and Open Project dialog to be bypassed, leading to local code execution. Recommendations: For versions prior to 2022.2, update to version 2022.2 or later to...

PT-2022-5127 · Nvidia · Nvidia Gpu Display Driver

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver for Windows affected versions not specified Description: The issue is related to an out-of-bounds write in the kernel mode layer of the NVIDIA GPU Display Driver for Windows, specifically in the nvlddmkm.sys module...

CVE-2022-37009

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible...

CVE-2022-37009

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible...

CVE-2022-37009

In JetBrains IntelliJ IDEA before 2022.2 local code execution via a Vagrant executable was possible...

CVE-2022-37009

JetBrains IntelliJ IDEA prior to 2022.2 is affected by CVE-2022-37009, enabling local code execution through the Vagrant executable. The vulnerability description across sources consistently states that local code execution via Vagrant is possible in affected IntelliJ IDEA versions before 2022.2....

PT-2022-19117 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered, allowing a low privileged user to execute arbitrary code, resulting in a complete loss of confidentiality, integrity,...

PT-2022-19114 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware. A highly privileged user could locally exploit this vulnerabili...

PT-2022-23754

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2022.2 Description The issue allows for local code execution via a Vagrant executable. Recommendations For versions prior to 2022.2, update to version 2022.2 or later to resolve the issue...

PT-2022-19125 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A potential local arbitrary code execution and a local denial of service DoS vulnerability were discovered in the firmware. An unprivileged user could locally exploit this...

PT-2022-19123 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A local arbitrary code execution issue was discovered, allowing a highly privileged user to execute arbitrary code, resulting in a complete loss of confidentiality,...

PT-2022-19124 · Hewlett Packard · Hpe Integrated Lights-Out 5 +1

Name of the Vulnerable Software and Affected Versions: HPE Integrated Lights-Out 5 iLO 5 versions prior to 2.71 Description: A potential local arbitrary code execution and a local denial of service DoS vulnerability were discovered in the firmware. An unprivileged user could locally exploit this...

CVE-2022-2313

A DLL hijacking vulnerability in the MA Smart Installer for Windows prior to 5.7.7, which allows local users to execute arbitrary code and obtain higher privileges via careful placement of a malicious DLL into the folder from where the Smart installer is being executed...

CVE-2022-32498

Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privileges, and bypass software allow list solutions, leading to system takeover or IP exposure...

CVE-2022-34900

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Access 6.5.3 39313 Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within t...

PT-2022-3284 · Ping Identity · Pingid Windows Login

Name of the Vulnerable Software and Affected Versions: PingID Windows Login versions prior to 2.8 Description: The issue is related to errors in authentication of the connection with a local Java service used to capture security key requests. An attacker with the ability to execute code on the...

NVIDIA DGX buffer error vulnerability

The Nvidia NVIDIA DGX is a high-performance workstation for deep learning applications from Nvidia, USA. A buffer error vulnerability exists in NVIDIA DGX A100 Servers prior to version 22.5.5, which stems from a boundary error when handling untrusted input in SBIOS in BiosCfgTool, and is exploite...

USN-5463-1 ntfs-3g vulnerabilities

It was discovered that NTFS-3G incorrectly handled the ntfsck tool. If a user or automated system were tricked into using ntfsck on a specially crafted disk image, a remote attacker could possibly use this issue to execute arbitrary code. CVE-2021-46790 Roman Fiedler discovered that NTFS-3G...