CVE-2020-12927

CVE-2020-12927 concerns a vulnerability in a dynamically loaded AMD driver within the AMD VBIOS Flash Tool SDK. It could allow any authenticated user to escalate privileges to NT authority system (local privilege escalation with high impact). The available sources describe the affected component ...

CVE-2020-12927

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated user to escalate privileges to NT authority system...

CVE-2020-12354

Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12304

Improper access control in Installer for IntelR DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2019-11121

Improper file permissions in the installer for the IntelR Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11121

Improper file permissions in the installer for the IntelR Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in Installer for IntelR DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access...

Default credentials

Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper file permissions in the installer for the IntelR Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12354

Intel AMT SDK for Windows contains a vulnerability CVE-2020-12354: incorrect default permissions in the Windows installer prior to 14.0.0.1 may allow an authenticated user with local access to escalate privileges. Affected component: Windows installer for Intel AMT SDK. Impact: local privilege es...

CVE-2020-12354

Incorrect default permissions in WindowsR installer in IntelR AMT SDK versions before 14.0.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2020-12304

CVE-2020-12304 affects Intel(R) DAL SDK installer on Windows prior to v2.1. The vulnerability is an improper access control flaw that could let an authenticated local user escalate privileges. Public documents consistently describe local elevated-privilege risk; exploitation details are not provi...

CVE-2020-12304

Improper access control in Installer for IntelR DAL SDK before version 2.1 for Windows may allow an authenticated user to potentially enable escalation of privileges via local access...

CVE-2019-11121

Improper file permissions in the installer for the IntelR Media SDK for Windows before version 2019 R1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11121

CVE-2019-11121 affects Intel® Media SDK for Windows before 2019 R1. The root cause is improper file permissions in the installer, allowing an authenticated local user to escalate privileges. Affected product: Intel® Media SDK for Windows* prior to 2019 R1. Impact: local privilege escalation with ...

Security Bulletin: Vulnerabilities in IBM Java SDK affecting IBM Application Discovery and Delivery Intelligence V5.1.0.7 and V5.1.0.8

Summary Multiple vulnerabilities are identified in IBM® SDK Java™ Technology Edition Version 1.8 that is used by IBM Application Discovery and Delivery Intelligence V5.1.0.7 and V5.1.0.8 respectively. These issues were disclosed as part of the IBM Java SDK updates in July 2020. Vulnerability...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM WebSphere Cast Iron Solution & App Connect Professional

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by IBM Cast Iron & App Connect Professional . These issues were disclosed as part of the IBM Java SDK updates in July 2020 have been addressed the applicable CVEs Vulnerability Details CVEID: CVE-2020-14621...

Security Bulletin: Vulnerability in IBM Java SDK affects IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary There is a vulnerability in IBM® SDK Java™ Technology Edition, Version 7.0.10.50 used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. This issue was disclosed as part of the IBM Java SDK updates in October 2019. Vulnerability Details CVEID: CVE-2019-2949 DESCRIPTION: An...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is used by IBM Cloud Orchestrator and IBM Cloud Orchestrator Enterprise. These issues were disclosed as part of the IBM® Java SDK affect Liberty for Java April 2020 CPU. Vulnerability Details CVEID: CVE-2020-2604...

Intel® Media SDK for Windows* Advisory

Summary: A potential security vulnerability in the Intel® Media SDK for Windows may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-11121 Description: Improper file permissions in the installer for...