PT-2020-4982

Name of the Vulnerable Software and Affected Versions IntelR VTuneTM Profiler versions prior to 2020 Update 1 Description The issue is related to an uncontrolled search path in the IntelR VTuneTM Profiler, which may allow an authenticated user to potentially enable escalation of privilege via loc...

CVE-2019-14558: Undefined Security Weakness

Insufficient control flow management in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable denial of service via adjacent access...

CVE-2020-8671: Undefined Security Weakness

Insufficient control flow management in BIOS firmware 8th, 9th Generation IntelR CoreTM Processors and IntelR CeleronR Processor 4000 Series may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2019-14556: Improper Initialization

Improper initialization in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow a privileged user to potentially enable denial of service via local access...

CVE-2019-14557: Buffer Copy without Checking Size of Input

Buffer overflow in BIOS firmware for 8th, 9th, 10th Generation IntelR CoreTM, IntelR CeleronR Processor 4000 & 5000 Series Processors may allow an authenticated user to potentially enable elevation of privilege or denial of service via adjacent access...

CVE-2020-0571: Undefined Security Weakness

Improper conditions check in BIOS firmware for 8th Generation IntelR CoreTM Processors and IntelR PentiumR Silver Processor Series may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2020-24457: Undefined Security Weakness

Logic error in BIOS firmware for 8th, 9th and 10th Generation IntelR CoreTM Processors may allow an unauthenticated user to potentially enable escalation of privilege, denial of service and/or information disclosure via physical access...

PT-2020-4288

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM versions 8th through 10th Generation IntelR CeleronR Processor versions 4000 & 5000 Series Description: The issue is related to improper initialization in BIOS firmware, which may allow a privileged user to enable denial of...

PT-2020-4285

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM and IntelR CeleronR Processor 4000 Series Processors affected versions not specified Description: The issue is related to an out of bound read in BIOS firmware, which may allow an unauthenticated user to potentially enable...

CVE-2020-12287: Incorrect Default Permissions

Incorrect permissions in the IntelR Distribution of OpenVINOTM Toolkit before version 2020.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-14630: Undefined Security Weakness

Reliance on untrusted inputs in a security decision in some IntelR ThunderboltTM controllers may allow unauthenticated user to potentially enable information disclosure via physical access...

CVE-2020-8763: Incorrect Default Permissions

Improper permissions in the installer for the IntelR RealSenseTM D400 Series UWP driver for Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2020-4357

Name of the Vulnerable Software and Affected Versions: IntelR RealSenseTM D400 Series UWP driver for Windows 10 affected versions not specified Description: The issue is related to improper permissions in the installer for the IntelR RealSenseTM D400 Series UWP driver, which may allow an...

PT-2020-4356

Name of the Vulnerable Software and Affected Versions: IntelR Distribution of OpenVINOTM Toolkit versions prior to 2020.2 Description: The issue is related to incorrect permissions in the IntelR Distribution of OpenVINOTM Toolkit, which may allow an authenticated user to potentially enable...

tm-goodwill.ru Cross Site Scripting vulnerability OBB-1218741

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

CVE-2020-0528: Undefined Security Weakness

Improper buffer restrictions in BIOS firmware for 7th, 8th, 9th and 10th Generation IntelR CoreTM Processor families may allow an authenticated user to potentially enable escalation of privilege and/or denial of service via local access...

CVE-2020-0529: Improper Initialization

Improper initialization in BIOS firmware for 8th, 9th and 10th Generation IntelR CoreTM Processor families may allow an unauthenticated user to potentially enable escalation of privilege via local access...

PT-2020-3999

Name of the Vulnerable Software and Affected Versions: IntelR CoreTM Processor families versions 7th through 10th Generation Description: The issue is related to improper buffer restrictions in BIOS firmware, which may allow an authenticated user to potentially enable escalation of privilege and/...

CVE-2020-8834

A flaw was found in the way the KVM hypervisor on the Power8 processor stores the r1 register state in the 'HSTATEHOSTR1' field on the Linux kernel stack. This flaw occurs while handling hypercalls in Transactional Memory TM suspend mode in the kvmppcsavetm and kvmppcrestoretm routines, leading t...

UBUNTU-CVE-2020-8834

KVM in the Linux kernel on Power8 processors has a conflicting use of HSTATEHOSTR1 to store r1 state in kvmppchventry plus in kvmppcsave,restoretm, leading to a stack corruption. Because of this, an attacker with the ability run code in kernel space of a guest VM can cause the host kernel to pani...