CVE-2018-19386: Improper Neutralization of Input During Web Page Generation

SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc?page= URI...

PT-2019-9798

Name of the Vulnerable Software and Affected Versions SolarWinds Database Performance Analyzer version 11.1.457 Description The issue concerns a Reflected XSS in the idcStateError component. Specifically, the page parameter is reflected into the HREF of the 'Try Again' Button on the page, which c...

Intel Graphics Performance Analyzer Access Control Privilege Escalation

The vulnerability of the Intel Graphics Performance Analyzer utility is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

CVE-2019-0158

Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0158

CVE-2019-0158 affects Intel® Graphics Performance Analyzer for Linux (GPA) 18.4 and earlier. Root cause: insufficient path checking in the GPA installation package, enabling an authenticated local user to potentially escalate privileges. Impact per Intel advisory: local escalation with high impac...

CVE-2019-0158: Undefined Security Weakness

Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2019-2077

Name of the Vulnerable Software and Affected Versions IntelR Graphics Performance Analyzer for Linux version 18.4 and before Description The issue is related to insufficient path checking in the installation package, which may allow an authenticated user to potentially enable escalation of...

Intel® Graphics Performance Analyzer for Linux Advisory

Summary: A potential security vulnerability in Intel® Graphics Performance Analyzer for Linux may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0158 Description: Insufficient path checking in the...

Microsoft Visual Studio wpa Protocol XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Visual Studio. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...