CVE-2025-32004

Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-24323

The CVE-2025-24323 issue affects Intel(R) PCIe Switch software (firmware package and LED mode toggle tool) prior to MR4_1.0b1. The root cause is improper access control, enabling a local, privileged user to escalate privileges. Impact is described as escalation of privilege with local access (no ...

CVE-2025-21093

Uncontrolled search path element for some IntelR Driver & Support Assistant Tool software before version 24.6.49.8 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20092

Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20092

CVE-2025-20092 affects Clock Jitter Tool software before version 6.0.1. The root cause is an uncontrolled search path that can be exploited by an authenticated user with local access to escalate privileges. Intel’s advisory (Intel‑SA‑01316) confirms the vulnerability and recommends updating to ve...

CVE-2025-20092

Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Security update for tiff

This update for tiff fixes the following issues: CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c bsc1247108 CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow when processing malformed TIFF files bsc1247106 Patch Instructions: To install this SUSE update use...

Security update for tiff

This update for tiff fixes the following issues: Updated TIFFMergeFieldInfo with readcount=writecount=0 for FIELDIGNORE bsc1243503 CVE-2025-8176: Fixed heap use-after-free in tools/tiffmedian.c bsc1247108 CVE-2025-8177: Fixed possible buffer overflow in tools/thumbnail.c:setrow when processing...

Intel Clock Jitter Tool 代码问题漏洞

Intel Clock Jitter Tool is a clock jitter analysis tool developed by Intel based on mathematical physics methodology. Intel Clock Jitter Tool suffers from an elevation of privilege vulnerability that stems from an uncontrolled search path, which can be exploited by an attacker to cause an elevati...

Clock Jitter Tool Software Advisory

Summary: A potential security vulnerability for some Clock Jitter Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-20092 Description: Uncontrolled search path for some Clock Jitter...

Linux Distros Unpatched Vulnerability : CVE-2024-41148

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code injection vulnerability has been discovered in the Robot Operating System ROS 'rostopic' command- line tool, affecting ROS distributions Noetic Ninjemys...

Linux Distros Unpatched Vulnerability : CVE-2025-21962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount...

Intel Edger8r Tool 输入验证错误漏洞

Intel Edger8r Tool is a code generation tool from Intel Corporation USA. Intel Edger8r Tool suffers from an input validation error vulnerability that stems from improper input validation, which could lead to elevation of privilege...

PT-2025-32756 · Intel · Intel Sgx Sdk +1

Name of the Vulnerable Software and Affected Versions: Intel Edger8r Tool for some IntelR SGX SDK affected versions not specified Description: Improper input validation in the Intel Edger8r Tool for some IntelR SGX SDK may allow an authenticated user to potentially escalate privileges via local...

PT-2025-32727 · Intel · Intel Pcie Switch

Name of the Vulnerable Software and Affected Versions: IntelR PCIe Switch software versions prior to MR4 1.0b1 Description: An improper access control issue exists in the firmware package and LED mode toggle tool for some IntelR PCIe Switch software. A privileged user may be able to escalate...

SAP Landscape Transformation 代码注入漏洞

SAP Landscape Transformation is a tool for system data migration and integration from SAP, Germany. A code injection vulnerability exists in SAP Landscape Transformation SLT that originates from the ability to inject arbitrary ABAP code via RFC...

📄 WebsiteBaker 2.13.7 r164 Command Injection

WebsiteBaker version 2.13.7 r164 suffers from an authenticated command injection vulnerability. Exploit Title: WebsiteBaker 2.13.7 r164 Command Injection Authenticated Exploit Author: tmrswrr /Hulya KARABAG Vendor Homepage: https://forum.websitebaker.org/ Software Link:...

Linux Distros Unpatched Vulnerability : CVE-2023-53117

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs: prevent out-of-bounds array speculation when closing a file descriptor Google-Bug-Id: 114199369 CVE-2023-53117 Note that Nessus relies on the presence of th...

PT-2025-32703 · Unknown · Clock Jitter Tool

Name of the Vulnerable Software and Affected Versions: Clock Jitter Tool versions prior to 6.0.1 Description: An uncontrolled search path issue exists in some Clock Jitter Tool software. This issue may allow an authenticated user to potentially escalate privileges via local access. Recommendation...

Intel® Software Guard Extensions SDK (Intel® SGX SDK) Edger8r Tool Advisory

Summary: A potential security vulnerability in the Intel Edger8r Tool for the Intel® Software Guard Extensions SDK Intel® SGX SDK may allow escalation of privilege. Intel is releasing prescriptive guidance to address this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-32004...