Incorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Chipset Device Software
Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access..
AFFECTED_PRODUCTS:
Intel Proset\/wireless,
Intel Killer
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Oneapi
Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Extreme Tuning Utility
Improper access control in firmware for some Intel(R) Thunderbol(TM) Controllers versions before 41 may allow a privileged user to enable denial of service via local access.
Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
AFFECTED_PRODUCTS:
Intel Proset\/wireless,
Intel Killer
Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Optane Persistent Memory Firmware,
Intel Optane Persistent Memory Firmware,
Intel Optane Persistent Memory Firmware
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable denial of service via physical access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
AFFECTED_PRODUCTS:
Intel Proset\/wireless,
Intel Killer
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Proset\/wireless,
Intel Killer
Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel One Boot Flash Update
Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Chipset Device Software
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Driver \& Support Assistant
Uncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Binary Configuration Tool
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial of service via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable information disclosure via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Optane Persistent Memory Firmware
Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to potentially enable escalation of privilege via local access.
AFFECTED_PRODUCTS:
Intel Thunderbolt Dch Driver
This is a duplicate for CVE-2023-46104. With correct CVE version ranges for affected Apache Superset.
Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets. Â
This vulnerability exists in Apache Superset...
AFFECTED_PRODUCTS:
Apache Superset,
Apache Superset
Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary OS command on the affected product.
Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to send an arbitrary HTTP request (GET) from the affected product.
AFFECTED_PRODUCTS:
Sharp Jh Rvb1 Firmware,
Sharp Jh Rv11 Firmware
Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to obtain an arbitrary file in the affected product.
AFFECTED_PRODUCTS:
Sharp Jh Rvb1 Firmware,
Sharp Jh Rv11 Firmware
Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary script on the web browser of the user who is accessing the management page of the affected produ...
AFFECTED_PRODUCTS:
Sharp Jh Rvb1 Firmware,
Sharp Jh Rv11 Firmware
Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a remote unauthenticated attacker to change the product settings.
AFFECTED_PRODUCTS:
Sharp Jh Rvb1 Firmware,
Sharp Jh Rv11 Firmware
Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, which may allow a network-adjacent unauthenticated attacker to obtain a username and its hashed password displayed on the management page of the affected produc...
AFFECTED_PRODUCTS:
Sharp Jh Rvb1 Firmware,
Sharp Jh Rv11 Firmware
Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attacker to access the affected product without authentication.
AFFECTED_PRODUCTS:
Sharp Jh Rvb1 Firmware,
Sharp Jh Rv11 Firmware
Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component.
AFFECTED_PRODUCTS:
Cusg Content Management System
Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component.
AFFECTED_PRODUCTS:
Cusg Content Management System
Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component.
AFFECTED_PRODUCTS:
Cusg Content Management System
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of Collection Rest API.
This issue may potentially...
AFFECTED_PRODUCTS:
Dell Secure Connect Gateway
In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern has been identified, where a malicious user with a valid User session may inject malicious content in filters of IP Range Rest API. This issue may potentially le...
AFFECTED_PRODUCTS:
Dell Secure Connect Gateway
In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concern has been identified, impacting locally authenticated users on their respective PCs. This issue may potentially enable privilege escalation and the execution...
AFFECTED_PRODUCTS:
Dell Supportassist For Home Pcs,
Dell Supportassist For Business Pcs
Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated non-admin users to gain temporary privilege within the SupportAssist User Interface on their respective PC. The Run as Admin temporary privilege feature enables I...
AFFECTED_PRODUCTS:
Dell Supportassist For Home Pcs
Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation (LPE). This vulnerability only affects first-time installations done prior to 8th March 2023
AFFECTED_PRODUCTS:
Dell Supportassist For Home Pcs