Improper access control

Improper access control in some IntelR Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...

Improper access control

Improper access control in some IntelR XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in some IntelR Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-22311

Improper access control in some IntelR OptaneTM PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25945

Protection mechanism failure in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...

Use After Free

hugin is vulnerable to Use After Free. The vulnerability is due to the ImageVariable::linkWith function. An attacker can exploit this vulnerability by parsing a crafted image...

BELL-CVE-2024-21404

Bulletin has no description...

BELL-CVE-2023-50387

Bulletin has no description...

MAL-2024-1002 Malicious code in erc20-testenv (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1ba12fa784008a111d1c5f54bbb19cf4807564ce4e06434d4a10eae96767350a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Bricks < 1.9.6.1 - Unauthenticated Remote Code Execution

Description The plugin does not prevent unauthenticated visitors from running code on vulnerable sites. PoC Run the following JS on any site using the theme: await fetch"/wp-json/bricks/v1/renderelement", "credentials": "include", "headers": "Content-Type": "application/json" , "body":...

Intel VROC software security vulnerability

Intel VROC software is an application from Intel Corporation USA. A security vulnerability exists in Intel VROC software prior to version 8.0.8.1001, which stems from an uncontrolled search path element issue that could lead to privilege escalation via local access by an authenticated user...

Intel Unite Access Control Error Vulnerability

Intel Unite is a suite of enterprise meeting collaboration solutions from Intel Corporation USA. A security vulnerability previously existed in Intel Unite Client software version 4.2.35041, which stemmed from improper access control in the affected product. It could allow authenticated users to...

Intel ACAT software security vulnerability

Intel ACAT is an open source platform from Intel Corporation. A security vulnerability exists in Intel ACAT software prior to version 2.0.0, which stems from an incorrect default privilege issue that could lead to privilege escalation via local access by an authenticated user...

CVE-2024-1485 Registry-support: decompress can delete files outside scope via relative paths

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...

Heap overflow

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0012, Tecnomatix Plant Simulation V2302 All versions V2302.0006. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted WRL files. This could allow an attacker...

BELL-CVE-2024-1454

Bulletin has no description...

BELL-CVE-2023-52429

Bulletin has no description...

CVE-2024-1062 389-ds-base: a heap overflow leading to denail-of-servce while writing a value larger than 256 chars (in log_entry_attr)

A heap overflow flaw was found in 389-ds-base. This issue leads to a denial of service when writing a value larger than 256 chars in logentryattr...

CVE-2024-25740

A memory leak flaw was found in the UBI driver in drivers/mtd/ubi/attach.c in the Linux kernel through 6.7.4 for UBIIOCATT, because kobj-name is not released...

PT-2024-11518 · Ibm · Ibm Robotic Process Automation

Name of the Vulnerable Software and Affected Versions: IBM Robotic Process Automation version 21.0.2 Description: The issue allows user ids to be exposed across tenants. Recommendations: For IBM Robotic Process Automation version 21.0.2, at the moment, there is no information about a newer versio...