U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. This comprises three vulnerabilities that Apple patched this week CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439...

[SECURITY] [DLA 3429-1] imagemagick security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3429-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucaries May 21, 2023 https://wiki.debian.org/LTS -...

CVE-2022-46656

Insecure inherited permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36391

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34848

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-36391

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34855

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32578

Improper access control for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Path traversal

Path traversal for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-32578

CVE-2022-32578 affects Intel® NUC Pro Software Suite prior to 2.0.0.3. The issue is improper access control that may allow an authenticated local attacker to escalate privileges. According to the Intel advisory and vulnerability records, affected software versions before 2.0.0.3 are at risk of lo...

CVE-2022-34855

The Intel NUC Pro Software Suite vulnerability CVE-2022-34855 is a path traversal issue reported for versions before 2.0.0.3 that may allow an authenticated local user to escalate privileges. Affected product: Intel NUC Pro Software Suite prior to 2.0.0.3. Root cause: path traversal leading to pr...

CVE-2022-34848

Intel NUC Pro Software Suite before version 2.0.0.3 is affected by CVE-2022-34848 due to an uncontrolled search path that may allow an authenticated local user to escalate privileges. The affected product is Intel NUC Pro Software Suite; the root cause is improper search path handling in the soft...

CVE-2022-46656

CVE-2022-46656 affects Intel\u00A0NUC Pro Software Suite prior to 2.0.0.3. The issue is insecure inherited permissions that may allow an authenticated user to escalate privileges via local access. Affected product is Intel\u00A0NUC Pro Software Suite; root cause described as insecure inherited pe...

CVE-2022-36391

Incorrect default permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-46656

Insecure inherited permissions for the IntelR NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel NUC Pro Software Suite 安全漏洞

Intel NUC Pro Software Suite is an application from Intel Corporation USA. A security vulnerability exists in Intel NUC Pro Software Suite versions prior to 2.0.0.3 that stems from insecure inheritance of privileges. An attacker could exploit the vulnerability to escalate privileges...

PT-2023-14981 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue concerns insecure inherited permissions that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...

PT-2023-13426 · Intel · Intel Nuc Pro Software Suite

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to an uncontrolled search path in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privilege...