Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS and iPadOS. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Remote code execution Administrator/Root rights - Remote code execution User rights - Access to...

PT-2024-40245 · Ez Systems · Ez Platform

Name of the Vulnerable Software and Affected Versions: eZ Platform versions 2.x Description: The issue affects the password reset functionality in the eZ Platform Admin UI, making it vulnerable to brute force attacks. Depending on the configuration, an attacker may exploit this to gain control ov...

PT-2024-26955 · WordPress · Hl Twitter Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: HL Twitter WordPress plugin versions through 2014.1.18 Description: The issue concerns a lack of CSRF check when unlinking Twitter accounts, potentially allowing attackers to make logged-in admins perform such actions via a CSRF attack...

PT-2024-20730 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.2 through 5.2 before 05.29.09 Insyde InsydeH2O kernel versions 5.3 through 5.3 before 05.38.09 Insyde InsydeH2O kernel versions 5.4 through 5.4 before 05.46.09 Insyde InsydeH2O kernel versions 5.5 through 5....

Intel Arc & Iris Xe Graphics Software Advisory - Lenovo Support US

No description provided...

Intel Thunderbolt Driver Advisory - Lenovo Support US

No description provided...

Intel CST Software Advisory - Lenovo Support US

No description provided...

Endurance Gaming Mode Software Advisory

Summary: A potential security vulnerability in some Endurance Gaming Mode software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42433 Description: Incorrect default permissions in...

Intel® Computing Improvement Program Software Advisory

Summary: A potential security vulnerability in some Intel® Computing Improvement Program software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21843 Description: Uncontrolled search path for...

Intel® VTune™ Profiler Advisory

Summary: A potential security vulnerability in some Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-45320 Description: Uncontrolled search path element in some...

Intel® DSA Software Uninstaller Advisory

Summary: A potential security vulnerability in some Intel® Driver & Support Assistant DSA software uninstallers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-45743 Description: Uncontrolled...

Intel® Arc™ Control Software Advisory

Summary: Potential security vulnerabilities in some Intel® Arc™ Control software may allow escalation of privilege or denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-29165 Description: Unquoted search path or elemen...

Intel® CST Software Advisory

Summary: A potential security vulnerability in some Intel® Context Sensing Technology CST software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-40155 Description:...

Intel® Arc™ & Iris® Xe Graphics Software Advisory

Summary: Potential security vulnerabilitiy in some Intel® Arc™ & Iris® Xe Graphics software may allow escalation of privilege. Intel is releasing updates to mitigate these potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21864 Description: Improper neutralization in some Intel® Arc...

Intel® Trace Analyzer and Collector Software Advisory

Summary: A potential security vulnerability in some Intel® Trace Analyzer and Collector software may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-22384 Description: Out-of-bounds read for some...

Libva Library Advisory

Summary: software A potential security vulnerability in some Libva library maintained by Intel® may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-39929 Description: Uncontrolled search path in so...

Intel® Graphics Command Center Service Software Advisory

Summary: A potential security vulnerability in some Intel® Graphics Command Center Service software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-43751 Description: Uncontrolled search path i...

PT-2024-18159 · Phoenix · Phoenix Securecore

Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore for Intel Gemini Lake versions 4.1.0.1 through 4.1.0.566 Description: The issue is related to a potential buffer overflow in unsafe UEFI variable handling. Recommendations: For Phoenix SecureCore for Intel Gemini Lake...

PT-2024-3672 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge versions prior to V224.0 Update 2 Description: A heap-based buffer overflow issue has been identified in the application while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the...

Intel® XTU Software Advisory

Summary: A potential security vulnerability in some Intel® Extreme Tuning Utility XTU software may allow escalation of privilege . Intel is releasing updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21835 Description: Insecure inherited permissions in some...