CVE-2022-27493

Improper initialization in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2022-26074

Incomplete cleanup in a firmware subsystem for IntelR SPS before versions SPSE304.08.04.330.0 and SPSE304.01.04.530.0 may allow a privileged user to potentially enable denial of service via local access...

CVE-2021-37409

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-21233

Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-21233

Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30944

Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...

PT-2022-14901 · Intel · Intel Proset/Wireless Wifi

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi products affected versions not specified Description: The issue is related to an out of bounds write that may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations:...

PT-2022-9721 · Intel · Intel Proset/Wireless Wifi +1

Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi and KillerTM WiFi products affected versions not specified Description: The issue is related to an out of bounds read that may allow a privileged user to potentially enable denial of service via local access...

DEBIAN-CVE-2020-14394

An infinite loop flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring. This flaw allows a privileged guest user to hang the QEMU process on the host, resulting in a denial of service...

PT-2022-7373

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the USB xHCI controller emulation of QEMU while computing the length of the Transfer Request Block TRB Ring, allowing a privileged guest user to hang the QEMU process on the...

CVE-2022-2661

Sequi PortBloque S has an improper authorization vulnerability, which may allow a low-privileged user to perform administrative functions using specifically crafted requests...

Authorization

Sequi PortBloque S has an improper authorization vulnerability, which may allow a low-privileged user to perform administrative functions using specifically crafted requests...

CVE-2022-2835

A flaw was found in coreDNS. This flaw allows a malicious user to reroute internal calls to some internal services that were accessed by the FQDN in a format of ..svc. Mitigation Consider adding the svc namespace to the DNS operator to prevent a low-privileged user from creating it. Alternatively...

GLSA-202208-30 : GNU Binutils: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-30 GNU Binutils: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in GNU Binutils. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block...

CVE-2022-28634

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and...

CVE-2022-28626

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and...

CVE-2022-28634

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. A highly privileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and...

CVE-2022-34235

Adobe Premiere Elements version 2020v20 and earlier is affected by an Uncontrolled Search Path Element which could lead to Privilege Escalation. An attacker could leverage this vulnerability to obtain admin using an existing low-privileged user. Exploitation of this issue does not require user...

CVE-2022-29090

Dell Wyse Management Suite 3.6.1 and below contains a Sensitive Data Exposure vulnerability. A low privileged malicious user could potentially exploit this vulnerability in order to obtain credentials. The attacker may be able to use the exposed credentials to access the target device and perform...

Intel Server Platform Services 安全漏洞

Intel Server Platform Services SPS is a server platform services program from Intel Corporation USA. A security vulnerability exists in Intel SPS SPSE304.08.04.330.0 and prior versions of SPSE304.01.04.530.0, which stems from an incomplete cleanup in the firmware subsystem could allow a privilege...