3136 matches found
CVE-2024-21837
CVE-2024-21837 affects Intel Quartus Prime Lite Edition Design software prior to 23.1. Root cause: uncontrolled search path. Impact: authenticated local user may escalate privileges. Affected product: Intel Quartus Prime Lite Edition; Versions before 23.1. Mitigation: upgrade to version 23.1 or l...
CVE-2024-21837
Uncontrolled search path in some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-21809
Improper conditions check for some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-21837
Uncontrolled search path in some IntelR QuartusR Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2024-19067 · Intel · Intel Quartus Prime Lite Edition
Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Lite Edition Design software versions prior to 23.1 Description: The issue is related to an improper conditions check in the software, which may allow an authenticated user to potentially enable escalation of privilege v...
Intel Quartus Prime 安全漏洞
Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime prior to version 23.1 that stems from an improper condition checking issue. It could allow an authenticated user to escalat...
PT-2024-19050 · Intel · Intel Quartus Prime Pro Edition
Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Pro Edition Design software versions prior to 23.4 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege via...
PT-2024-19100 · Intel · Intel Quartus Prime Standard Edition
Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Standard Edition Design software versions prior to 23.1 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privileg...
Intel Quartus Prime 安全漏洞
Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability previously existed in Intel Quartus Prime version 23.1, which stemmed from an uncontrolled search path issue. It could allow an authenticated user to...
Intel Quartus Prime 安全漏洞
Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability previously existed in Intel Quartus Prime Standard Edition Design software version 23.1, which stemmed from an uncontrolled search path issue. It could...
PT-2024-19084 · Intel · Intel Quartus Prime Lite Edition
Name of the Vulnerable Software and Affected Versions: IntelR QuartusR Prime Lite Edition Design software versions prior to 23.1 Description: The issue is related to an uncontrolled search path in the software, which may allow an authenticated user to potentially enable escalation of privilege vi...
Intel Quartus Prime 安全漏洞
Intel Quartus Prime is a programmable logic device tool for the design and development of Fpga from Intel Corporation. A security vulnerability exists in Intel Quartus Prime prior to version 23.4 that stems from an uncontrolled search path issue. It could allow an authenticated user to escalate...
CVE-2024-4339
The Prime Slider – Addons For Elementor Revolution of a slider, Hero Slider, Ecommerce Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the General widget in all versions up to, and including, 3.14.3 due to insufficient input sanitization and output escaping. This make...
WordPress plugin Prime Slider 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Intel® Quartus Prime Software Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01055.html...
PT-2024-30550 · WordPress · The Prime Slider – Addons For Elementor
Name of the Vulnerable Software and Affected Versions: The Prime Slider – Addons For Elementor plugin for WordPress versions up to, and including, 3.14.3 Description: The issue is related to Stored Cross-Site Scripting due to insufficient input sanitization and output escaping in the General...
WordPress Prime Slider plugin <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Ngô Thiên An ancorn in WordPress Plugin Prime Slider – Addons For Elementor versions = 3.14.3...
WordPress Prime Slider – Addons For Elementor Plugin <= 3.14.3 is vulnerable to Cross Site Scripting (XSS)
Software Prime Slider – Addons For Elementor Type Plugin Vulnerable versions = 3.14.3 Fixed in 3.14.4 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-4339 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 737165ec9dfc Credits Ng...
openssl: Excessive time spent checking invalid RSA public keys
A flaw was found in OpenSSL. When the EVPPKEYpubliccheck function is called in RSA public keys, a computation is done to confirm that the RSA modulus, n, is composite. For valid RSA keys, n is a product of two or more large primes and this computation completes quickly. However, if n is a large...