Latest CVE Feed
-
5.4
MEDIUMCVE-2024-45875
The create user function in baltic-it TOPqw Webportal 1.35.287.1 (fixed in version1.35.291), in /Apps/TOPqw/BenutzerManagement.aspx/SaveNewUser, is vulnerable to SQL injection. The JSON object username allows the manipulation of SQL queries.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 21, 2024
-
8.7
HIGHCVE-2024-41167
Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user to potentially enable escalation of privilege via local access.... Read more
- Published: Nov. 13, 2024
- Modified: Nov. 19, 2024
-
8.7
HIGHCVE-2024-40885
Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
6.3
MEDIUMCVE-2024-39811
Improper input validation in firmware for some Intel(R) Server M20NTP Family UEFI may allow a privileged user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
7.3
HIGHCVE-2024-39766
Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
8.7
HIGHCVE-2024-39609
Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potentially enable escalation of privilege via local access.... Read more
- Published: Nov. 13, 2024
- Modified: Nov. 19, 2024
-
8.6
HIGHCVE-2024-39368
Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
5.6
MEDIUMCVE-2024-39285
Improper access control in UEFI firmware in some Intel(R) Server M20NTP Family may allow a privileged user to potentially enable information disclosure via local access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
7.8
HIGHCVE-2024-38668
Uncontrolled search path for some Intel(R) Quartus(R) Prime Standard Edition software for Windows before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
- Published: Nov. 13, 2024
- Modified: Feb. 04, 2025
-
8.4
HIGHCVE-2024-38665
Out-of-bounds write in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : graphics_drivers- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
3.8
LOWCVE-2024-38660
Protection mechanism failure in the SPP for some Intel(R) Xeon(R) processor family (E-Core) may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
6.7
MEDIUMCVE-2024-38387
Uncontrolled search path in the Intel(R) Graphics Driver installers for versions 15.40 and 15.45 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : graphics_driver- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
7.8
HIGHCVE-2024-38383
Uncontrolled search path for some Intel(R) Quartus(R) Prime Pro Edition software for Windows before version 24.2 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
- Published: Nov. 13, 2024
- Modified: Feb. 04, 2025
-
6.1
MEDIUMCVE-2024-37027
Improper Input validation in some Intel(R) VTune(TM) Profiler software before version 2024.2.0 may allow an authenticated user to potentially enable denial of service via local access.... Read more
Affected Products : vtune_profiler- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
6.7
MEDIUMCVE-2024-37025
Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
6.7
MEDIUMCVE-2024-37024
Uncontrolled search path for some ACAT software maintained by Intel(R) for Windows before version 3.11.0 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024
-
7.8
HIGHCVE-2024-36488
Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : driver_\&_support_assistant- Published: Nov. 13, 2024
- Modified: Feb. 04, 2025
-
8.2
HIGHCVE-2024-36482
Improper input validation in some Intel(R) CIP software before version 2.4.10852 may allow a privileged user to potentially enable escalation of privilege via local access.... Read more
Affected Products : computing_improvement_program- Published: Nov. 13, 2024
- Modified: Feb. 04, 2025
-
7.8
HIGHCVE-2024-36294
Insecure inherited permissions for some Intel(R) DSA software before version 24.3.26.8 may allow an authenticated user to potentially enable escalation of privilege via local access.... Read more
Affected Products : driver_\&_support_assistant- Published: Nov. 13, 2024
- Modified: Feb. 04, 2025
-
5.5
MEDIUMCVE-2024-36284
Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.... Read more
Affected Products :- Published: Nov. 13, 2024
- Modified: Nov. 15, 2024