CVE-2024-21862

CVE-2024-21862 concerns Intel’s Quartus Prime Standard Edition Design software prior to version 23.1, where an uncontrolled search path may allow an authenticated user to escalate privileges via local access. The issue is documented across multiple connected sources (NVD entry and Intel advisory)...

CVE-2024-21837

CVE-2024-21837 affects Intel Quartus Prime Lite Edition Design software prior to 23.1. Root cause: uncontrolled search path. Impact: authenticated local user may escalate privileges. Affected product: Intel Quartus Prime Lite Edition; Versions before 23.1. Mitigation: upgrade to version 23.1 or l...

CVE-2024-21809

Intel Quadruples Prime Lite Edition before 23.1 is affected by CVE-2024-21809 due to an improper conditions check that could enable privilege escalation via local access for an authenticated user. The issue affects Intel® Quartus® Prime Lite Edition Design software prior to 23.1; colleagues also ...

CVE-2024-21828

Intel reports CVE-2024-21828 as an improper access control vulnerability in Intel(R) Ethernet Controller Administrative Tools installer software before version 28.3. An authenticated user could potentially escalate privileges via local access. Affected products include Intel(R) Ethernet Adapter C...

CVE-2024-21835

CVE-2024-21835 concerns Intel® XTU software prior to version 7.14.0.15, where insecure inherited permissions may allow an authenticated user to escalate privileges via local access. The root cause is insecure inherited permissions, enabling local privilege escalation. Affected product: Intel® XTU...

CVE-2024-21843

The CVE-2024-21843 entry concerns Intel® Computing Improvement Program software with an uncontrolled search path vulnerability prior to version 2.4.0.10654 that could allow a locally authenticated user to escalate privileges. Affected product: Intel® Computing Improvement Program (before 2.4.0.10...

CVE-2024-21788

CVE-2024-21788 affects Intel GPA software (and related GPA components) prior to 2023.4, via an uncontrolled search path in the executable or library loading. The root cause is an uncontrolled search path that could allow an authenticated user with local access to escalate privileges. Affected pro...

CVE-2024-21861

Intel GPA Framework software before version 2023.4 is affected by an Uncontrolled search path vulnerability that can allow an authenticated user to escalate privileges via local access. The issue resides in the GPA Framework/Intel GPA software prior to 2023.4 and is mitigated by updating to versi...

CVE-2024-24981

The CVE-2024-24981 issue affects Intel Server M50FCP Family UEFI firmware, specifically the PfrSmiUpdateFw driver, where improper input validation may enable privilege escalation via local access. Reported by multiple sources (NVD/Red Hat/CVE listings) with a CVSS v3.1 base score of 7.5 (High), l...

CVE-2024-22476

CVE-2024-22476 affects Intel Neural Compressor before version 2.5.0, due to improper input validation that enables an unauthenticated attacker to potentially achieve remote escalation of privilege via SQL injection. The Nuclei template and Intel advisory corroborate the affected product/version a...

CVE-2024-5023

CVE-2024-5023 affects Netflix ConsoleMe prior to 1.4.0. Root cause: improper neutralization of special elements used in a command within Template resources flow, enabling command execution via crafted inputs. Documentation indicates authenticated users can achieve limited remote code execution co...

CVE-2024-27260

CVE-2024-27260 : IBM AIX and VIOS are affected by a vulnerability in the invscout command that could allow a non-privileged local user to execute arbitrary commands. Affected products/versions: AIX 7.2 and 7.3; VIOS 3.1 and 4.1 (invscout.rte 2.2.0.0–2.2.0.26). Root cause is the invscout component...

CVE-2024-34760

CVE-2024-34760: Stored XSS in WPBlockart Magazine Blocks due to improper neutralization of input during web page generation. Affected: Magazine Blocks versions up to 1.3.6 (no details on fixed version or patch in the provided documents). The Connected Red Hat entry and Wordfence report confirm th...

CVE-2024-34805

CVE-2024-34805 is an stored XSS in the Webvitaly iFrame plugin (WordPress). The root cause is improper neutralization of input during web page generation, enabling stored cross-site scripting in iFrame output. Affected range is iFrame: from n/a through 5.0. Public feeds indicate this vulnerabilit...

CVE-2024-34751

CVE-2024-34751 is a vulnerability in the WordPress plugin “Order Export & Order Import for WooCommerce” (affected: versions up to and including 2.4.9). The issue is a deserialization of untrusted data leading to an authenticated PHP Object Injection, requiring Administrator+ privileges to exploit...

CVE-2024-34808

CVE-2024-34808 is an authenticated path traversal vulnerability in JCH Optimize for WordPress (JCH Optimize

CVE-2024-4956

Affected product: Sonatype Nexus Repository 3. Vulnerability: Path Traversal (CWE-22) allowing an unauthenticated attacker to read system files. Root cause / details: Unauthenticated path traversal in Nexus Repository 3 enables access to sensitive files; fixed in version 3.68.1. Impact (as stated...

CVE-2024-34273

CVE-2024-34273 affects njwt up to v0.4.0, with a prototype pollution flaw in Parser.prototype.parse. Public records consistently identify the issue as this library’s Parser.parse pollution vector, not a general exploit chain. CVSS metrics document Network access, high complexity, and no privilege...

CVE-2024-20326

The CVE-2024-20326 entry applies to Cisco ConfD CLI and Cisco Crosswork NSO CLI. The vulnerability stems from improper authorization enforcement for specific CLI commands, allowing an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying OS. Exp...

CVE-2024-4999

CVE-2024-4999 affects Ligowave UNITY (up to 6.95-2), PRO (up to 6.95-1.Rt3883), MIMO (up to 6.95-1.Rt2880), and APC Propeller (up to 2-5.95-4.Rt3352). The issue is a vulnerability in the web-based management interface that could allow an authenticated remote attacker to execute arbitrary commands...