PT-2023-14204 · Checkmk · Checkmk

Name of the Vulnerable Software and Affected Versions: Checkmk versions prior to 2.1.0p1 Checkmk versions prior to 2.0.0p25 Checkmk versions prior to 1.6.0p29 Description: The issue allows a site user to escalate privileges via a manipulated unixcat executable due to an uncontrolled search path...

NVIDIA GeForce Experience < 3.27.0.112 Multiple Vulnerabilities

The version of NVIDIA GeForce Experience installed on the remote host is prior to 3.24.0.126. It is, therefore, affected by multiple vulnerabilities: - A vulnerability in the installer, where a user installing the NVIDIA GeForce Experience software may inadvertently delete data from a linked...

CVE-2023-25151: Uncontrolled Resource Consumption

opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp uses the httpconv.ServerRequest function to annotate metric measurements for the http.server.requestcontentlength,...

Uncontrolled Resource Consumption

opentelemetry-go-contrib is a collection of extensions for OpenTelemetry-Go. The v0.38.0 release of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp uses the httpconv.ServerRequest function to annotate metric measurements for the http.server.requestcontentlength,...

The vulnerability of the PostgreSQL database management system, related to an uncontrolled search path element, allows a perpetrator to enhance their privileges and execute arbitrary commands.

The vulnerability of the PostgreSQL database management system is related to an uncontrolled element in the search path processing when handling the searchpath parameter. Exploiting this vulnerability allows a malicious actor to enhance their privileges and execute arbitrary commands...

CVE-2022-31611

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

Design/Logic Flaw

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

CVE-2022-31611

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

CVE-2022-31611

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

CVE-2022-31611: Uncontrolled Search Path Element

NVIDIA GeForce Experience contains an uncontrolled search path vulnerability in all its client installers, where an attacker with user level privileges may cause the installer to load an arbitrary DLL when the installer is launched. A successful exploit of this vulnerability could lead to...

NVIDIA GeForce Experience 代码问题漏洞

NVIDIA GeForce Experience is a set of automatic graphics card update tools from NVIDIA. The product can automatically update graphics card drivers and support graphics card performance management and optimization, among other things. A security vulnerability exists in NVIDIA GeForce Experience,...

CVE-2022-38136

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-42950: Uncontrolled Resource Consumption

An issue was discovered in Couchbase Server 7.x before 7.0.5 and 7.1.x before 7.1.2. A crafted HTTP REST request from an administrator account to the Couchbase Server Backup Service can exhaust memory resources, causing the process to be killed, which can be used for denial of service...

CVE-2022-38136: Uncontrolled Search Path Element

Uncontrolled search path in the IntelR oneAPI DPC++/C++ Compiler for Windows and Intel Fortran Compiler for Windows before version 2022.2.1 for some IntelR oneAPI Toolkits before version 2022.3.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-47356: Uncontrolled Resource Consumption

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47370: Uncontrolled Resource Consumption

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47355: Uncontrolled Resource Consumption

In log service, there is a missing permission check. This could lead to local denial of service in log service...

CVE-2022-47354: Uncontrolled Resource Consumption

In log service, there is a missing permission check. This could lead to local denial of service in log service...

Rocky Linux 9 : go-toolset and golang (RLSA-2022:5799)

The remote Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:5799 advisory. - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function cou...