CVE-2023-27391

Improper access control in some IntelR oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-28823

Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28405

Uncontrolled search path in the IntelR Distribution of OpenVINOTM Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-28405

Intel® Distribution of OpenVINO™ Toolkit prior to version 2022.3.0 is affected by CVE-2023-28405 due to an uncontrolled search path, potentially allowing an authenticated user to escalate privileges via local access. The advisory and multiple feeds confirm the affected product and the root cause....

Intel Distribution of OpenVINO(TM) Toolkit Code Issue Vulnerability

The Intel Distribution of OpenVINOTM Toolkit is an application and solution for developing applications and solutions that use deep learning intelligence from Intel USA. Based on convolutional neural networks CNNs, the toolkit scales workloads across Intel® hardware, including gas pedals, and...

Intel oneAPI Toolkits Code Issue Vulnerability

Intel oneAPI Toolkits is an application from Intel Corporation USA. A security vulnerability exists in IntelR oneAPI Toolkit and component versions prior to 4.3.1.493. An attacker can exploit the vulnerability to elevate privileges...

Design/Logic Flaw

Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction i...

CVE-2023-38210 Other | Uncontrolled Resource Consumption (CWE-400)

Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction i...

CVE-2023-38210 Other | Uncontrolled Resource Consumption (CWE-400)

Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction i...

CVE-2023-38210

CVE-2023-38210 affects Adobe XMP Toolkit SDK (2022.06). The flaw is an Uncontrolled Resource Consumption leading to application denial-of-service when a user opens a malicious file; exploitation requires user interaction and is context of the current user. Adobe’s advisory APSB23-45 notes a secur...

CVE-2023-38210 Other | Uncontrolled Resource Consumption (CWE-400)

Adobe XMP Toolkit versions 2022.06 is affected by a Uncontrolled Resource Consumption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction i...

USN-6280-1: PyPDF2 vulnerability

It was discovered that PyPDF2 incorrectly handled PDF files with certain markers. If a user or automated system were tricked into processing a specially crafted file, an attacker could possibly use this issue to consume system resources, resulting in a denial of service...

Adobe XMP Toolkit 资源管理错误漏洞

Adobe XMP Toolkit is a toolkit from the American company Audobee Adobe. Used to integrate Xmp functionality into a product or solution. Adobe XMP Toolkit has a Resource Management Error vulnerability that originates from the presence of uncontrolled resource consumption in the application, which...

PT-2023-21991 · Intel · Intel Oneapi Toolkit

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Toolkit versions prior to 4.3.1.493 Description: The issue is related to an uncontrolled search path in some IntelR oneAPI Toolkit and component software installers. This may allow an authenticated user to potentially enable...

Adobe Releases Security Updates for Multiple Products

Adobe has released security updates to address multiple vulnerabilities in Adobe software. An attacker can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following Adobe Security Bulletins and apply the necessary...

APSB23-45 : Security update available for Adobe XMP Toolkit SDK

Adobe has released updates for XMP-Toolkit-SDK. This update resolves an important vulnerability. Successful exploitation could lead to application denial of service...

多款Siemens产品 缓冲区错误漏洞

Siemens JT Open Toolkit Siemens JTTK is a C++ Application Programming Interface API from Siemens, Germany, providing support for 64-bit application development on Microsoft Windows, Linux and MacOS. It provides support for 64-bit application development on Microsoft Windows, Linux, and MacOS.JT i...

Intel® oneAPI Toolkit and Component Software Installers Advisory

Summary: Potential security vulnerabilities in some Intel® oneAPI Toolkit and component software installers may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-27391 Description: Improper access...

Intel® Distribution of OpenVINO™ Toolkit Advisory

Summary: A potential security vulnerability in the Intel® Distribution of OpenVINO™ Toolkit may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-28405 Description: Uncontrolled search path in the...

Out-of-Bounds Read

nvidia-cuda-toolkit is vulnerable to Out-of-Bounds Read. The vulnerability exists in cuobjdump which allows an attacker to cause an out-of-bounds read by tricking a user into running cuobjdump on a malformed input file...