|
247211
|
4.8 |
MEDIUM
Local
|
intel
|
iot_developers_kit
|
A DLL injection vulnerability in the Intel IoT Developers Kit 4.0 installer may allow an authenticated user to potentially escalate privileges using file modification via local access.
|
CWE-427
Uncontrolled Search Path Element
|
CVE-2018-12163
|
2024-11-21 12:44 |
2018-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247212
|
7.8 |
HIGH
Local
|
intel
|
openvino_toolkit
|
Directory permissions in the Intel OpenVINO Toolkit for Windows before version 2018.1.265 may allow an authenticated user to potentially execute code using default directory permissions via local acc…
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2018-12162
|
2024-11-21 12:44 |
2018-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247213
|
5.3 |
MEDIUM
Local
|
intel
|
data_migration_software
|
DLL injection vulnerability in software installer for Intel Data Center Migration Center Software v3.1 and before may allow an authenticated user to potentially execute code using default directory p…
|
CWE-427 CWE-276
Uncontrolled Search Path Element Incorrect Default Permissions
|
CVE-2018-12160
|
2024-11-21 12:44 |
2018-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247214
|
5.5 |
MEDIUM
Local
|
intel
|
extreme_tuning_utility
|
Buffer overflow in installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially cause a buffer overflow potentially leading to a denial of service via loc…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-12151
|
2024-11-21 12:44 |
2018-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247215
|
6.7 |
MEDIUM
Local
|
intel
|
extreme_tuning_utility
|
Escalation of privilege in Installer for Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially execute code or disclose information as administrator via local ac…
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-12150
|
2024-11-21 12:44 |
2018-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247216
|
5.5 |
MEDIUM
Local
|
intel
|
extreme_tuning_utility
|
Buffer overflow in input handling in Intel Extreme Tuning Utility before 6.4.1.21 may allow an authenticated user to potentially deny service to the application via local access.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-12149
|
2024-11-21 12:44 |
2018-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247217
|
7.8 |
HIGH
Local
|
intel
|
driver_\&_support_assistant
|
Privilege escalation in file permissions in Intel Driver and Support Assistant before 3.5.0.1 may allow an authenticated user to potentially execute code as administrator via local access.
|
CWE-732
Incorrect Permission Assignment for Critical Resource
|
CVE-2018-12148
|
2024-11-21 12:44 |
2018-09-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247218
|
7.4 |
HIGH
Network
|
apache oracle
|
activemq flexcube_private_banking enterprise_repository
|
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client …
|
CWE-295
Improper Certificate Validation
|
CVE-2018-11775
|
2024-11-21 12:44 |
2018-09-11 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247219
|
6.1 |
MEDIUM
Network
|
myadrenalin
|
adrenalin
|
A Reflected Cross Site Scripting (XSS) Vulnerability was discovered in Adrenalin 5.4.0 HRMS Software. The user supplied input containing JavaScript is echoed back in JavaScript code in an HTML respon…
|
CWE-79
Cross-site Scripting
|
CVE-2018-12234
|
2024-11-21 12:44 |
2018-09-7 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
247220
|
5.9 |
MEDIUM
Network
|
symantec
|
norton_password_manager
|
The Norton Identity Safe product prior to 5.3.0.976 may be susceptible to a privilege escalation issue via a hard coded IV, which is a type of vulnerability that can potentially increase the likeliho…
|
CWE-798
Use of Hard-coded Credentials
|
CVE-2018-12240
|
2024-11-21 12:44 |
2018-08-30 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|