12584 matches found
Intel® Extension for Transformers Software Advisory
Summary: A potential security vulnerability in some Intel® Extension for Transformers software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21799 Description: Path traversal for some Intel®...
Intel® Optane™ PMem Management Software Advisory
Summary: A potential security vulnerability in some Intel® Optane™ Persistent Memory PMem management software may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-36275 Description: NULL pointer...
PT-2024-8831 · Intel · Intel Granulate
Name of the Vulnerable Software and Affected Versions: IntelR GranulateTM software versions prior to 4.30.1 Description: The issue is related to improper access control in IntelR GranulateTM software, which may allow an authenticated user to potentially enable escalation of privilege via local...
JAM STAPL Player Software Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01151.html...
Intel® Granulate™ Software Advisory
Summary: A potential security vulnerability in some Intel® Granulate™ software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-27200 Description: Improper access control in some Intel® Granulat...
Intel® SGX SDK Advisory
Summary: Potential security vulnerability in the Intel® Software Guard Extensions Intel® SGX Software Development Kit SDK may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-34776 Description:...
Intel® QuickAssist Technology Engine for OpenSSL Advisory
Summary: Potential security vulnerabilities in the Intel® QuickAssist Technology Intel® QAT Engine for OpenSSL engine for OpenSSL software may allow information disclosure . Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-336...
Intel® DSA Software Advisory
Summary: Potential security vulnerabilities in some Intel® Driver Support Assistant Intel® DSA Software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-36488 Description: Improper Access...
Intel® CST Software Advisory
Summary: A potential security vulnerability in some Intel® Context Sensing Technology Intel® CST software may allow denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-29076 Description: Uncaught exception for...
SUSE SLES12 Security Update : expat (SUSE-SU-2024:3968-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2024:3968-1 advisory. - CVE-2024-50602: Fixed a denial of service via XMLResumeParser bsc1232579. Tenable has extracted the preceding description block directly from the SUS...
Intel® Quartus® Prime Pro Edition Software Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01195.html...
Intel® CIP Software Advisory
Summary: Potential security vulnerabilities in some Intel® Computing Improvement Program software Intel® CIP may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-36276 Description: Insecure...
BigDL Software Advisory
Summary: Potential security vulnerabilities in some BigDL software maintained by Intel® may allow escalation of privilege and denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-29085 Description: Improper acce...
HPESBUX04729 rev.1 - HP-UX NTP Software, Denial of Service (DoS)
Potential Security Impact: Remote: Denial of Service DoS, Unauthorized Write Access to the File System, Null pointer dereference SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP-UX NTP Software - Prior to C.4.2.8.7.0 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- |...
PT-2024-28646 · Ivanti · Ivanti Policy Secure +1
Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.6R2 Ivanti Policy Secure versions prior to 22.7R1 Description: The issue is related to incorrect file permissions in Ivanti Connect Secure and Ivanti Policy Secure, allowing a local authenticated...
DLA-3949-1 ruby-saml - security update
Bulletin has no description...
CVE-2024-52002 Cross-Site Request Forgery (CSRF) in several iTop pages
Combodo iTop is a simple, web based IT Service Management tool. Several url endpoints are subject to a Cross-Site Request Forgery CSRF vulnerability. Please refer to the linked GHSA for the complete list. This issue has been addressed in version 3.2.0 and all users are advised to upgrade. There a...
MGASA-2024-0348 Updated ruby-webrick packages fix security vulnerability
An issue was discovered in the WEBrick toolkit through 1.8.1 for Ruby. It allows HTTP request smuggling by providing both a Content-Length header and a Transfer-Encoding header, e.g., "GET /admin HTTP/1.1\r\n" inside of a "POST /user HTTP/1.1\r\n" request. CVE-2024-47220...