CVE-2021-33092

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33091

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit audio driver pack before version 1.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33095

CVE-2021-33095 describes an unquoted search path in the installer for the Intel NUC M15 Laptop Kit Keyboard LED Service driver pack prior to 1.0.0.4. Affected product/component: Intel NUC M15 Laptop Kit Keyboard LED Service driver pack (before 1.0.0.4). Root cause: unquoted search path in the ins...

CVE-2021-33088

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33094: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33095: Unquoted Search Path or Element

Unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack before version 1.0.0.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33091: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit audio driver pack before version 1.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33092: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack before version 2.2.1.383 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33093: Incorrect Permission Assignment for Critical Resource

Insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Serial IO driver pack before version 30.100.2104.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33088: Incorrect Default Permissions

Incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack before version 5.4.1.4449 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-20044

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit audio driver pack versions prior to 1.3 Description The issue is related to insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit audio driver pack. This may allow an authenticated user to...

PT-2021-20048

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack versions prior to 1.0.0.4 Description The issue is related to an unquoted search path in the installer for the IntelR NUC M15 Laptop Kit Keyboard LED Service driver pack. This may allo...

PT-2021-20039

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Management Engine driver pack versions prior to 15.0.10.1508 Description The issue is related to improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack. This may allow...

PT-2021-20045

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit HID Event Filter driver pack versions prior to 2.2.1.383 Description The issue is related to incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit HID Event Filter driver pack. This may allo...

CVE-2021-33087: Improper Authentication

Improper authentication in the installer for the IntelR NUC M15 Laptop Kit Management Engine driver pack before version 15.0.10.1508 may allow an authenticated user to potentially enable denial of service via local access...

PT-2021-20040

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack versions prior to 5.4.1.4449 Description The issue is related to incorrect default permissions in the installer for the IntelR NUC M15 Laptop Kit Integrated Sensor Hub driver pack. Th...

PT-2021-20046

Name of the Vulnerable Software and Affected Versions IntelR NUC M15 Laptop Kit Serial IO driver pack versions prior to 30.100.2104.1 Description The issue is related to insecure inherited permissions in the installer for the IntelR NUC M15 Laptop Kit Serial IO driver pack. This may allow an...

rails: Possible Denial of Service vulnerability in Action Dispatch

A flaw was found in RubyGem Actionpack which is framework for handling and responding to web requests in Rails. A possible Denial of Service vulnerability was found in the Mime type parser of Action Dispatch...

rubygem-actionpack: Possible Information Disclosure / Unintended Method Execution in Action Pack

A flaw was found in rubygem-actionpack. Information disclosure or unintended method execution is possible when using the redirectto or polymorphicurl helper with untrusted user input. The highest threat from this vulnerability is to data confidentiality...

Security Bulletin: Inadequate encryption strength in IBM Security Guardium Key Lifecycle Manager (CVE-2021-38984)

Summary Inadequate encryption strength in IBM Security Guardium Key Lifecycle Manager CVE-2021-38984. Vulnerability Details CVEID: CVE-2021-38984 DESCRIPTION: IBM Tivoli Key Lifecycle Manager uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensiti...