Intel® MPI Library Software Advisory

Summary: A potential security vulnerability in some Intel® MPI Library software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28876 Description: Uncontrolled search path for some Intel® MPI...

PT-2024-6364 · Intel · Intel Ethernet Network Controllers/Adapters

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Network Controllers and Adapters versions prior to 28.3 Description: The issue is related to insufficient input validation in the Linux kernel mode driver, which may allow an authenticated user to potentially enable escalation...

PT-2024-7652 · Intel · Intel Cip

Name of the Vulnerable Software and Affected Versions: IntelR CIP software versions prior to 2.4.10717 Description: The issue is related to improper access control in IntelR CIP software, which may allow an authenticated user to potentially enable denial of service via local access. This is also...

Intel®  ISH Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Integrated Sensor Hub ISH software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-23974 Description: Incorrect default...

Intel® oneAPI Compiler Software Advisory

Summary: A potential security vulnerability in some Intel® oneAPI Compiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21857 Description: Uncontrolled search path for some Intel®...

BMRA Software Advisory

Summary: A potential security vulnerability in some Bare Metal Reference System Architecture BMRA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21787 Description: Inadequate encrypti...

Intel® FPGA SDK for OpenCL™ Software Technology Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01104.html...

Flexlm License Daemons for Intel® FPGA Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01107.html...

Intel® VTune™ Profiler Software Advisory

Summary: A potential security vulnerability in some Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-29015 Description: Uncontrolled search path in some Intel®...

 Intel® Quartus® Prime Pro Edition Design Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01127.html...

Intel® TDX Module Software Advisory

Summary: A potential security vulnerability in Intel® Trust Domain Extensions TDX module software may allow escalation of privilege. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-39283 Description: Incomplete filtering of...

PT-2024-6010 · Adobe · Commerce

Name of the Vulnerable Software and Affected Versions: Adobe Commerce versions 2.4.7-p1, 2.4.6-p6, 2.4.5-p8, 2.4.4-p9 and earlier Description: The issue is related to an Unrestricted Upload of File with Dangerous Type, which could result in arbitrary code execution by an attacker. An attacker cou...

PT-2024-26856 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions below 8003 Description: The issue is related to an authenticated SQL Injection vulnerability in user session recording. Recommendations: For Zohocorp ManageEngine ADAudit Plus versions below 8003,...

PT-2024-37409 · WordPress · Wp-Cart-For-Digital-Products

Name of the Vulnerable Software and Affected Versions: wp-cart-for-digital-products versions prior to 8.5.6 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back in the page...

PT-2024-37408 · WordPress · Wp-Cart-For-Digital-Products

Name of the Vulnerable Software and Affected Versions: wp-cart-for-digital-products versions prior to 8.5.6 Description: The issue concerns a Reflected Cross-Site Scripting problem. It arises because a parameter is not properly sanitised and escaped before being outputted back in the page. This...

PT-2024-6089 · Zabbix +2 · Zabbix Agent +3

Name of the Vulnerable Software and Affected Versions: Zabbix Agent versions prior to 7.0.0rc2 Description: The issue is related to improper permission storage in the Zabbix Agent application. This can allow an attacker to elevate their privileges. A non-admin user can change or remove important...

[SECURITY] [DSA 5742-1] odoo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5742-1 [email protected] https://www.debian.org/security/ Sebastien Delafond August 08, 2024 https://www.debian.org/security/faq -...

CVE-2024-38202

CVE-2024-38202 describes an elevation of privilege in Windows Update that could allow a user with basic privileges to reintroduce mitigated vulnerabilities or bypass some VBS protections. The vulnerability requires an attacker to coax an Administrator or delegated user into performing a system re...

PT-2024-29901

Name of the Vulnerable Software and Affected Versions aiohttp versions prior to 3.10.2 Description The issue is related to path traversal outside the root directory in static routes containing files with compressed variants .gz or .br extension when these variants are symbolic links. The server...

PT-2024-29630 · Poly · Poly Clariti Manager

Name of the Vulnerable Software and Affected Versions: Poly Clariti Manager versions up to 10.10.2.2 Description: A flaw in the firmware of Poly Clariti Manager devices was discovered, where access controls are not properly implemented. Recommendations: For versions up to 10.10.2.2, update to a...