Privilege escalation

Uncontrolled resource consumption in the IntelR HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable privilege escalation via local access...

CVE-2021-0182

Uncontrolled resource consumption in the IntelR HAXM software before version 7.6.6 may allow an unauthenticated user to potentially enable information disclosure via local access...

CVE-2021-0182

CVE-2021-0182 affects Intel(R) HAXM before version 7.6.6. The issue is described as uncontrolled resource consumption that may allow an unauthenticated, locally present attacker to disclose information. Impact is constrained to local access; no remote vector described. Intel lists a fix in versio...

CVE-2021-0082

Summary of CVE-2021-0082 : The issue affects Intel® PROSet/Wireless WiFi and Killer™ WiFi software on Windows 10. It is described as an Uncontrolled search path in the software installer , which may allow an authenticated user to potentially escalate privileges via local access. The Red Hat/Intel...

CVE-2021-0082

Uncontrolled search path in software installer for IntelR PROSet/Wireless WiFi in Windows 10 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-33073

CVE-2021-33073 affects Intel’s Distribution of OpenVINO Toolkit prior to version 2021.4. The Red Hat and Intel advisory entries confirm an Uncontrolled resource consumption flaw that may allow an unauthenticated user to cause denial of service via local access. Affected product scope is the Intel...

CVE-2021-33063

Uncontrolled search path in the IntelR RealSenseTM D400 Series UWP driver for Windows 10 before version 6.1.160.22 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-5595 · Wireshark +5 · Wireshark +5

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.2.0 through 3.2.17 Wireshark versions 3.4.0 through 3.4.9 Description: The issue is caused by uncontrolled recursion in the Bluetooth DHT dissector. This can be exploited by a remote attacker to cause a denial of service ...

CVE-2021-3840

A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index PyPi. MITRE classifies this weakness as...

CVE-2021-3840

A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index PyPi. MITRE classifies this weakness as...

Type confusion

A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index PyPi. MITRE classifies this weakness as...

CVE-2021-3840

CVE-2021-3840 : A dependency confusion flaw in the Antilles open-source software prior to 1.0.1 could allow remote code execution during installation when a package listed in requirements.txt does not exist in PyPI. The issue is categorized as CWE-427 (Uncontrolled Search Path Element) where a pr...

Intel Distribution of OpenVINO(TM) Toolkit 资源管理错误漏洞

The Intel Distribution of OpenVINOTM Toolkit is an application and solution for developing applications and solutions that use deep learning intelligence from Intel USA. The toolkit is based on Convolutional Neural Networks CNNs and scales workloads across Intel® hardware, including gas pedals, a...

kernel: Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers

An uncontrolled resource consumption in some IntelR Ethernet E810 Adapter drivers for Linux may allow an authenticated user to potentially cause a denial of service via local access...

Citrix Application Delivery Controller, Citrix Gateway, and Citrix SD-WAN WANOP Edition appliance Security Update

Vulnerabilities have been discovered in Citrix ADCformerlyknown asNetScaler ADC,Citrix Gateway formerlyknown asNetScaler Gateway,and Citrix SD-WAN WANOP Edition models 4000-WO, 4100-WO, 5000-WO, and 5100-WO.These vulnerabilities,if exploited,could result in the following security issues: CVE-ID|...

Moderate: kernel security, bug fix, and enhancement update

The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: out-of-bounds reads in pinctrl subsystem CVE-2020-0427 kernel: Improper input validation in some IntelR Ethernet E810 Adapter drivers CVE-2020-24502 kernel: Insufficient access control in...

Mozilla Firefox has an unspecified vulnerability (CNVD-2021-101164)

Mozilla Firefox is an open source web browser from the Mozilla Foundation. Mozilla Firefox is vulnerable due to an unusual sequence of events controlled by an attacker, and alert can therefore display arbitrary albeit unstyled content on top of an uncontrolled page of the attacker's choice...

CVE-2021-38509

Due to an unusual sequence of attacker-controlled events, a Javascript alert dialog with arbitrary although unstyled contents could be displayed over top an uncontrolled webpage of the attacker's choosing. This vulnerability affects Firefox 94, Thunderbird 91.3, and Firefox ESR 91.3...

Insyde InsydeH2O 安全特征问题漏洞

Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the legacy BIOS Basic Input/Output System. insydeH2O Int15MicrosoftSmm has a security feature issue vulnerability that stems from uncontrolled input t...

CVE-2021-38509

Due to an unusual sequence of attacker-controlled events, a Javascript alert dialog with arbitrary although unstyled contents could be displayed over top an uncontrolled webpage of the attacker's choosing. This vulnerability affects Firefox 94, Thunderbird 91.3, and Firefox ESR 91.3...