deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-21784
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) IPP Cryptography software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01114.html
CVE: CVE-2024-21787
Published: 2024-08-14
Description: Inadequate encryption strength for some BMRA software before version 22.08 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-326
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00790.html
CVE: CVE-2024-21801
Published: 2024-08-14
Description: Insufficient control flow management in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 7.1 (HIGH)
CWE: CWE-691
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01070.html
CVE: CVE-2024-21806
Published: 2024-08-14
Description: Improper conditions check in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-754
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-21807
Published: 2024-08-14
Description: Improper initialization in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-665, CWE-269, CWE-665
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-21810
Published: 2024-08-14
Description: Improper input validation in the Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-21844
Published: 2024-08-14
Description: Integer overflow in firmware for some Intel(R) CSME may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-190
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00999.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-21857
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) oneAPI Compiler software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01057.html
CVE: CVE-2024-22184
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition Design Software before version 24.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01127.html
CVE: CVE-2024-22374
Published: 2024-08-14
Description: Insufficient control flow management for some Intel(R) Xeon Processors may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-691
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01073.html
CVE: CVE-2024-22376
Published: 2024-08-14
Description: Uncontrolled search path element in some installation software for Intel(R) Ethernet Adapter Driver Pack before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01106.html
CVE: CVE-2024-22378
Published: 2024-08-14
Description: Incorrect default permissions in some Intel Unite(R) Client Extended Display Plugin software installers before version 1.1.352.157 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01095.html
CVE: CVE-2024-23489
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) VROC software before version 8.6.0.1191 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01128.html
CVE: CVE-2024-23491
Published: 2024-08-14
Description: Uncontrolled search path in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01075.html
CVE: CVE-2024-23495
Published: 2024-08-14
Description: Incorrect default permissions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01075.html
CVE: CVE-2024-23497
Published: 2024-08-14
Description: Out-of-bounds write in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-23499
Published: 2024-08-14
Description: Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-23907
Published: 2024-08-14
Description: Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01113.html
CVE: CVE-2024-23908
Published: 2024-08-14
Description: Insecure inherited permissions in some Flexlm License Daemons for Intel(R) FPGA software before version v11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277, CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01107.html
CVE: CVE-2024-23909
Published: 2024-08-14
Description: Uncontrolled search path in some Intel(R) FPGA SDK for OpenCL(TM) software technology may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01104.html
CVE: CVE-2024-23974
Published: 2024-08-14
Description: Incorrect default permissions in some Intel(R) ISH software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01088.html
CVE: CVE-2024-23981
Published: 2024-08-14
Description: Wrap-around error in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-128, CWE-682
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-24580
Published: 2024-08-14
Description: Improper conditions check in some Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01094.html
CVE: CVE-2024-24853
Published: 2024-08-14
Description: Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-696
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01083.html
CVE: CVE-2024-24973
Published: 2024-08-14
Description: Improper input validation for some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 2.2 (LOW)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01075.html
CVE: CVE-2024-24977
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) License Manager for FLEXlm product software before version 11.19.5.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01126.html
CVE: CVE-2024-24980
Published: 2024-08-14
Description: Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01100.html
CVE: CVE-2024-24983
Published: 2024-08-14
Description: Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693, CWE-693
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-24986
Published: 2024-08-14
Description: Improper access control in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00918.html
CVE: CVE-2024-25561
Published: 2024-08-14
Description: Insecure inherited permissions in some Intel(R) HID Event Filter software installers before version 2.2.2.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277, CWE-732
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01089.html
CVE: CVE-2024-25562
Published: 2024-08-14
Description: Improper buffer restrictions in some Intel(R) Distribution for GDB software before version 2024.0.1 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01075.html
CVE: CVE-2024-25576
Published: 2024-08-14
Description: improper access control in firmware for some Intel(R) FPGA products before version 24.1 may allow a privileged user to enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01087.html
CVE: CVE-2024-25939
Published: 2024-08-14
Description: Mirrored regions with different values in 3rd Generation Intel(R) Xeon(R) Scalable Processors may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-1251
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01118.html
CVE: CVE-2024-26022
Published: 2024-08-14
Description: Improper access control in some Intel(R) UEFI Integrator Tools on Aptio V for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01172.html
CVE: CVE-2024-26025
Published: 2024-08-14
Description: Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01110.html
CVE: CVE-2024-26027
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) Simics Package Manager software before version 1.8.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01116.html
CVE: CVE-2024-27461
Published: 2024-08-14
Description: Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01164.html
CVE: CVE-2024-28046
Published: 2024-08-14
Description: Uncontrolled search path in some Intel(R) GPA software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01105.html
CVE: CVE-2024-28050
Published: 2024-08-14
Description: Improper access control in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.4824 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01130.html
CVE: CVE-2024-28172
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) Trace Analyzer and Collector software before version 2022.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01117.html
CVE: CVE-2024-28876
Published: 2024-08-14
Description: Uncontrolled search path for some Intel(R) MPI Library software before version 2021.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01115.html
CVE: CVE-2024-28887
Published: 2024-08-14
Description: Uncontrolled search path in some Intel(R) IPP software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01129.html
CVE: CVE-2024-28947
Published: 2024-08-14
Description: Improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware before version 02.01.0017 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01121.html
CVE: CVE-2024-28953
Published: 2024-08-14
Description: Uncontrolled search path in some EMON software before version 11.44 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01125.html
CVE: CVE-2024-29015
Published: 2024-08-14
Description: Uncontrolled search path in some Intel(R) VTune(TM) Profiler software before versions 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01122.html
CVE: CVE-2024-34163
Published: 2024-08-14
Description: Improper input validation in firmware for some Intel(R) NUC may allow a privileged user to potentially enableescalation of privilege via local access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01022.html
CVE: CVE-2024-39283
Published: 2024-08-14
Description: Incomplete filtering of special elements in Intel(R) TDX module software before version TDX_1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-791
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01010.html
CVE: CVE-2024-7790
Published: 2024-08-14
Description: A stored cross site scripting vulnerabilities exists in DevikaAI from commit 6acce21fb08c3d1123ef05df6a33912bf0ee77c2 onwards via improperly decoded user input.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.tenable.com/security/research/tra-2024-31
CVE: CVE-2024-20789
Published: 2024-08-14
Description: Dimension versions 3.4.11 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/dimension/apsb24-47.html
CVE: CVE-2024-20790
Published: 2024-08-14
Description: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb24-47.html
CVE: CVE-2024-25157
Published: 2024-08-14
Description: An authentication bypass vulnerability in GoAnywhere MFT prior to 7.6.0 allows Admin Users with access to the Agent Console to circumvent some permission checks when attempting to visit other pages. This could lead to unauthorized information disclosure or modification.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-303, CWE-287
References: https://www.fortra.com/security/advisories/product-security/fi-2024-009
CVE: CVE-2024-34117
Published: 2024-08-14
Description: Photoshop Desktop versions 24.7.3, 25.9.1 and earlier are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://helpx.adobe.com/security/products/photoshop/apsb24-49.html
CVE: CVE-2024-34118
Published: 2024-08-14
Description: Illustrator versions 28.5, 27.9.4 and earlier are affected by an Improper Input Validation vulnerability that could lead to an application denial-of-service condition. An attacker could exploit this vulnerability to render the application unresponsive or terminate its execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://helpx.adobe.com/security/products/illustrator/apsb24-45.html
CVE: CVE-2024-34124
Published: 2024-08-14
Description: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/dimension/apsb24-47.html
CVE: CVE-2024-34125
Published: 2024-08-14
Description: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb24-47.html
CVE: CVE-2024-34126
Published: 2024-08-14
Description: Dimension versions 3.4.11 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/dimension/apsb24-47.html
CVE: CVE-2024-34127
Published: 2024-08-14
Description: InDesign Desktop versions ID19.4, ID18.5.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/indesign/apsb24-56.html
CVE: CVE-2024-34133
Published: 2024-08-14
Description: Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/illustrator/apsb24-45.html
CVE: CVE-2024-34134
Published: 2024-08-14
Description: Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb24-45.html
CVE: CVE-2024-34135
Published: 2024-08-14
Description: Illustrator versions 28.5, 27.9.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/illustrator/apsb24-45.html