LibreOffice Input Validation Error Vulnerability (CNVD-2023-9963392)

LibreOffice is an open source office software suite from The Document Foundation tdf. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. An input validation error vulnerability exists in LibreOffice that stems from the presence of incorre...

CVE-2022-41700

CVE-2022-41700 affects Intel NUC Pro Software Suite installer prior to 2.0.0.9, where insecure inherited permissions may allow an authenticated local user to escalate privileges. The Intel advisory and related Red Hat/NVD entries confirm the issue and list affected products and versions. Remediat...

CVE-2022-41700: Insecure Inherited Permissions

Insecure inherited permissions in some IntelR NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticated user to potentially enable escalation of privilege via local access...

Microsoft Office Graphics Elevation of Privilege Vulnerability

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, etc.. An elevation of privilege vulnerability exists in Microsoft Office Graphics. An attacker can exploit this...

Microsoft Office Elevation of Privilege Vulnerability (CNVD-2024-02721)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. Microsoft Office has an elevation of privilege vulnerability that can be exploited by an attacker to...

Microsoft Office Security Feature Bypass Vulnerability (CNVD-2024-02720)

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. The product's common components include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security feature bypass vulnerability exists in Microsoft Office, which can be exploited by attacker...

ROS-20230911-05

Vulnerability in the document processing, conversion and generation software suite Ghostscript exists due to failure to take measures to neutralize special elements used in the operating system command. Exploitation of the vulnerability could allow an attacker to execute arbitrary code by using t...

CVE-2023-28385

Improper authorization in the IntelR NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access...

CVE-2023-28385

Intel NUC Pro Software Suite for Windows before version 2.0.0.9 is affected by CVE-2023-28385 due to improper authorization, potentially enabling privilege escalation via local access by a privileged user. The vulnerability has a CVSS v3.1 base score of 8.2 (HIGH) with LOCAL access, low attack co...

Intel NUC Security Vulnerability

Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in IntelR NUC Pro Software Suite for Windows prior to version 2.0.0.9 that originates from improper authorization management. An attacker can exploit the vulnerability to elevate privileges...

CVE-2023-28385: Improper Authorization

Improper authorization in the IntelR NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation of privilage via local access...

U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. This comprises three vulnerabilities that Apple patched this week CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439...

[SECURITY] [DLA 3429-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3429-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucaries May 21, 2023 https://wiki.debian.org/LTS -...

CVE-2022-46656

Insecure inherited permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36391

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36391

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34848

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34855

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32578

Improper access control for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Path traversal

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...