PT-2020-1875

Name of the Vulnerable Software and Affected Versions IntelR Graphics Drivers versions prior to 26.20.100.6912 Description The issue is caused by a buffer overflow in the IntelR Graphics Drivers, which may allow an authenticated user to potentially enable a denial of service via local access. Thi...

PT-2020-4008

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers versions prior to 26.20.100.7212 Description: The issue is related to improper access control in the IntelR Graphics Drivers, which may allow an authenticated user to potentially enable information disclosure via local...

PT-2020-4005

Name of the Vulnerable Software and Affected Versions: IntelR OptaneTM DC Persistent Memory Module Management Software versions prior to 1.0.0.3461 Description: The issue is related to an unquoted service path in the software, which may allow an authenticated user to potentially enable escalation...

PT-2020-4009

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Drivers versions prior to 15.40.44.5107 Description: The issue is related to an uncaught exception in the system driver, potentially allowing an authenticated user to enable a denial of service via local access. It is also...

PT-2020-1874

Name of the Vulnerable Software and Affected Versions IntelR Graphics Drivers versions prior to 15.33.49.5100 IntelR Graphics Drivers versions prior to 15.36.38.5117 IntelR Graphics Drivers versions prior to 15.40.44.5107 IntelR Graphics Drivers versions prior to 15.45.30.5103 IntelR Graphics...

PT-2020-22714

Name of the Vulnerable Software and Affected Versions texlive-filesystem affected versions not specified Description The issue concerns security fixes for texlive-filesystem, including changing the default user for ls-R files and font cache directories to user nobody, switching to rm instead of...

CVE-2020-9015: Undefined Security Weakness

Arista DCS-7050QX-32S-R 4.20.9M, DCS-7050CX3-32S-R 4.20.11M, and DCS-7280SRAM-48C6-R 4.22.0.1F devices and possibly other products allow attackers to bypass intended TACACS+ shell restrictions via a | character. NOTE: the vendor reports that this is a configuration issue relating to an overly...

ICSA-20-051-01_B&R Automation Studio and Automation Runtime

1. EXECUTIVE SUMMARY CVSS v3 9.4 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: B&R Industrial Automation GmbH Equipment: Automation Studio and Automation Runtime Vulnerability: Improper Authorization 2. RISK EVALUATION Successful exploitation of this vulnerability may allow a...

PT-2020-20430 · Arista · Arista Dcs-7050Cx3-32S-R +2

Name of the Vulnerable Software and Affected Versions: Arista DCS-7050QX-32S-R version 4.20.9M Arista DCS-7050CX3-32S-R version 4.20.11M Arista DCS-7280SRAM-48C6-R version 4.22.0.1F Description: The issue allows attackers to bypass intended TACACS+ shell restrictions via a | character. This is...

CVE-2020-5531

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller ModuleQ24DHCCPU-V, Q24DHCCPU-VG User Ethernet port CH1, CH2: First 5 digits of serial number 21121 or before, MELSEC iQ-R Series C Controller Module / C Intelligent Function ModuleR12CCPU-V Ethern...

CVE-2020-5531

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller ModuleQ24DHCCPU-V, Q24DHCCPU-VG User Ethernet port CH1, CH2: First 5 digits of serial number 21121 or before, MELSEC iQ-R Series C Controller Module / C Intelligent Function ModuleR12CCPU-V Ethern...

CVE-2020-5531: Undefined Security Weakness

Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller ModuleQ24DHCCPU-V, Q24DHCCPU-VG User Ethernet port CH1, CH2: First 5 digits of serial number 21121 or before, MELSEC iQ-R Series C Controller Module / C Intelligent Function ModuleR12CCPU-V Ethern...

Input validation

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14598

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...

CVE-2020-0563

Improper permissions in the installer for IntelR MPSS before version 3.8.6 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0564: Incorrect Default Permissions

Improper permissions in the installer for IntelR RWC3 for Windows before version 7.010.009.000 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-0561: Improper Initialization

Improper initialization in the IntelR SGX SDK before v2.6.100.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Net-SNMPd Write Access SNMP-EXTEND-MIB arbitrary code execution (authenticated)

Targets running Net-SNMPd may be vulnerable to remote code execution. If the service user has R/W access and the attacker knows the SNMP community string value, then the attacker can manipulate the target’s SNMP extension MIBs SNMP-EXTEND-MIB to enable and achieve remote code execution on the...

CVE-2020-0562: Incorrect Default Permissions

Improper permissions in the installer for IntelR RWC2, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14598: Improper Authentication

Improper Authentication in subsystem in IntelR CSME versions 12.0 through 12.0.48 IOT only: 12.0.56, versions 13.0 through 13.0.20, versions 14.0 through 14.0.10 may allow a privileged user to potentially enable escalation of privilege, denial of service or information disclosure via local access...