Privilege escalation

Uncontrolled search path element in some IntelR VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-34427

Protection mechanism failure in some IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA in version 0.25.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-27348 · Genians · Genian Nac Suite +2

Name of the Vulnerable Software and Affected Versions: Genians Genian NAC versions 4.0.0 through 4.0.155 Genians Genian NAC versions 5.0.0 through 5.0.42 Revision 117460 Genians Genian NAC Suite versions 5.0.0 through 5.0.54 Genians Genian ZTNA versions 6.0.0 through 6.0.15 Description: The issue...

Intel PROSet/Wireless WiFi Software Security Vulnerability

Intel PROSet/Wireless WiFi Software is a wireless network card driver from Intel Corporation. A security vulnerability exists in Intel PROSet/Wireless WiFi Software, which is caused due to a faulty protection mechanism. An attacker can exploit the vulnerability to elevate privileges...

PT-2023-23868 · Intel · Mavinci Desktop

Name of the Vulnerable Software and Affected Versions: MAVinci Desktop Software for IntelR Falcon 8+ versions prior to 6.2 Description: The issue is related to incorrect default permissions in the software, which may allow an authenticated user to potentially enable escalation of privilege via...

PT-2023-21180 · Intel · Intel Ispc

Name of the Vulnerable Software and Affected Versions: IntelR ISPC software installers versions prior to 1.19.0 Description: The issue is related to improper access control in some IntelR ISPC software installers, which may allow an authenticated user to potentially enable escalation of privilege...

Snow Software Snow License Manager Cross-Site Scripting Vulnerability

Snow Software Snow License Manager SLM is the central hub of the Snow Software Asset Management platform from Snow Software, Sweden. A cross-site scripting vulnerability exists in Snow Software Snow License Manager versions 8.0.0 through 9.30.1, which originates from a cross-site scripting attack...

PT-2023-26536 · Snow · Software License Manager

Name of the Vulnerable Software and Affected Versions: Snow Software license manager versions 8.0.0 through 9.30.1 Description: The issue is related to a blind SQL injection in a service running in the Snow Software license manager. This allows a logged-in user with high privileges to inject SQL...

PT-2023-22961 · Intel · Intel Realsense Id +1

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA version 0.25.0 Description: The issue is an out-of-bounds read that may allow an authenticated user to potentially enable information disclosure via local access. Recommendations: F...

PT-2023-14210 · Intel · Intel(R) Rst

Name of the Vulnerable Software and Affected Versions: IntelR RST software versions prior to 16.8.5.1014.5 IntelR RST software versions prior to 17.11.3.1010.2 IntelR RST software versions prior to 18.7.6.1011.2 IntelR RST software versions prior to 19.5.2.1049.5 Description: The issue is related...

PT-2023-14517 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: IntelR UnisonTM versions prior to 10.12 Description: The issue involves the use of hard-coded credentials in some IntelR UnisonTM software, which may allow an authenticated user to potentially enable information disclosure via local access...

Adobe Acrobat Reader 代码问题漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. An input validation error vulnerability exists in Adobe Acrobat Reader, which can be exploited by an attacker to cause a denial of service in the application...

Magento Open Source allows Improper Neutralization of Special Elements Used

Adobe Commerce versions 2.4.6-p1 and earlier, 2.4.5-p3 and earlier and 2.4.4-p4 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated...

BELL-CVE-2023-20569

Bulletin has no description...

PT-2023-4401 · Intel · Intel Quartus Prime Pro +1

Name of the Vulnerable Software and Affected Versions: Intel Quartus Prime Pro and Standard edition software for Linux affected versions not specified Description: The issue is related to an uncontrolled search path element in Intel Quartus Prime Pro and Standard edition software for Linux. This...

PT-2023-19275 · Bkmacdaddy · Pinterest Rss Widget

Name of the Vulnerable Software and Affected Versions: bkmacdaddy designs Pinterest RSS Widget plugin versions 2.3.1 and earlier Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited by contributors or higher-privileged users...

Path Traversal

libunrar.so is vulnerable to Path Traversal. The vulnerability is due to the library's inability to recognize symbolic links in archives, which can result in the extraction of files outside the restricted directory...

SUSE-SU-2023:3222-1 Security update for gstreamer-plugins-ugly

This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38103: Fixed integer overflow during parsing of MDPR chunks bsc1213751. - CVE-2023-38104: Fixed integer overflow during parsing of MDPR chunks bsc1213750...

PT-2023-5108 · Vim +3 · Vim +3

Name of the Vulnerable Software and Affected Versions: vim versions 9.0.1367-1 through 9.0.1367-3 Description: The issue is related to a divide by zero error in the vim text editor. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: For versions 9.0.1367-...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability exists due to the lack of user input validation in the QUIC of the library, allowing an attacker to perform header splitting via malicious network traffic...