CVE Vulnerability Catalog

ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker with high privileges could exploit this to crash the application. Exploitation does not require user interaction.

The vulnerability related to improper encoding or escaping of output could result in a security feature bypass. A low-privileged attacker could leverage this to bypass security measures and gain limited unauthorized write access, causing limited disruption to availability. Exploitation does not require user interaction.

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service. A low-privileged attacker could exploit this to crash the application, leading to a denial-of-service condition. Exploitation does not require user interaction.

CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation requires user interaction – the victim must visit a maliciously crafted URL or interact with a compromised web page. Scope is changed.

Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.

Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.

Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 may allow an escalation of privilege. An unprivileged adversary with an unauthenticated user and low complexity attack may enable privilege escalation. This may occur via network access without user interaction. Impact on confidentiality, integrity, and availability is low.

Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 may allow an escalation of privilege. An unprivileged adversary with an unauthenticated user and low complexity attack may enable privilege escalation. This may occur via local access and requires active user interaction. Impact on confidentiality, integrity, and availability is low.

Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning before version 45cd723 may allow an escalation of privilege. An unprivileged adversary with a privileged user and low complexity attack may enable privilege escalation. This may occur via local access and requires passive user interaction. Impact on confidentiality, integrity, and availability is high.

Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 may allow an escalation of privilege. An unprivileged adversary with an authenticated user and high complexity attack may enable privilege escalation. This may occur via local access and requires passive user interaction. Impact on confidentiality, integrity, and availability is high.

Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 may allow an escalation of privilege. An unprivileged adversary with a privileged user and low complexity attack may enable privilege escalation. This may occur via local access and requires passive user interaction. Impact on confidentiality, integrity, and availability is high.

Path traversal vulnerability in gaudi-container-runtime before version 1.24.0 may allow privilege escalation. An attacker with an authenticated user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.

Protection mechanism failure in Intel(R) Workload Services Framework may allow privilege escalation. An attacker with a privileged user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.

Protection mechanism failure in LLM-on-Ray before version 1.0 may allow privilege escalation. An attacker with a privileged user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.

Uncontrolled search path in EquiTriton before version f5ddbb5 may allow privilege escalation. An attacker with a privileged user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.

Improper input validation in vLLM Hardware Plugin for Intel(R) Gaudi(R) before version 0.16.0 may allow denial of service. An authorized attacker with an authenticated user and a low complexity attack can exploit this locally, without user interaction. The impact on availability is high.

Protection mechanism failure in Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 may allow privilege escalation. An attacker with a privileged user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.

Use after free in Intel(R) PROSet/Wireless WiFi Software for Windows may allow denial of service. An attacker with an unauthenticated user and a high complexity attack can exploit this locally, without user interaction. The impact on availability is high.

Protection mechanism failure in Intel(R) AI Reference Models before version v3.4.1 may allow privilege escalation. An attacker with a privileged user and a low complexity attack can exploit this locally, requiring passive user interaction. The impact on confidentiality, integrity, and availability is high.

Heap-based buffer overflow in Intel(R) Open Volume Kernel Library (Open VKL) before version 2.0.2 may allow denial of service. An attacker with an authenticated user and a low complexity attack can exploit this locally, without user interaction. The impact on integrity is low and on availability is high.