Priority MEDIUM 41
Improper restriction of XML external entity reference in DSP Builder Pro for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an unauthenticated user to potentially enable information disclosure via ne…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01087 · Published 2022-02-09 · No fix listed CWE-611
Priority LOW 36
Improper restriction of XML external entity for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00238 · Published 2022-02-09 · No fix listed CWE-611
Priority LOW 36
Improper access control in a third-party component of Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00256 · Published 2022-02-09 · No fix listed
Priority LOW 36
Improper input validation in a third-party component for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00256 · Published 2022-02-09 · No fix listed CWE-20
Priority LOW 35
Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2023-05-10 · No fix listed CWE-427
Priority LOW 35
Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software before version 22.1 may allow authenticated user to potentially enable escalation of privilege via local…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00169 · Published 2023-02-16 · No fix listed
Priority LOW 35
Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00198 · Published 2023-02-16 · No fix listed
Priority LOW 35
Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00225 · Published 2023-02-16 · No fix listed CWE-22
Priority LOW 35
Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00161 · Published 2023-02-16 · No fix listed CWE-287
Priority LOW 35
Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02std may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00166 · Published 2022-11-11 · No fix listed CWE-427
Priority LOW 35
Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00186 · Published 2023-02-16 · No fix listed
Priority LOW 35
Improper permissions for Intel(R) Quartus(R) Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00223 · Published 2022-02-09 · No fix listed CWE-276
Priority LOW 35
Improper permissions in the SafeNet Sentinel driver for Intel(R) Quartus(R) Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00223 · Published 2022-02-09 · No fix listed CWE-281
Priority LOW 35
Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before version 20.3 and Intel(R) Quartus(R) Prime Standard Edition before version 20.2 may allow unauthenticated…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01192 · Published 2020-11-12 · No fix listed CWE-611
Priority LOW 34
XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition software may allow an unauthenticated user to potentially enable information disclosure via network access.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00665 · Published 2022-11-11 · No fix listed CWE-91
Priority LOW 34
Improper permissions in the installer for the License Server software for Intel® Quartus® Prime Pro Edition before version 19.3 may allow an authenticated user to potentially enable escalation of privilege via local acce…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00267 · Published 2019-12-16 · No fix listed CWE-276
Priority LOW 34
Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00319 · Published 2019-05-17 · No fix listed CWE-732
Priority LOW 34
Unquoted service paths in Intel Quartus Prime in versions 15.1 - 18.0 allow a local attacker to potentially execute arbitrary code.
CVSS 3.0HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00353 · Published 2018-07-10 · No fix listed CWE-428
Priority LOW 33
Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00184 · Published 2024-05-16 · No fix listed CWE-427
Priority LOW 33
Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00184 · Published 2024-05-16 · No fix listed CWE-427
Priority LOW 33
Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00197 · Published 2024-05-16 · No fix listed CWE-92
Priority LOW 33
Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00197 · Published 2024-05-16 · No fix listed CWE-427
Priority LOW 33
Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00182 · Published 2023-02-16 · No fix listed CWE-427
Priority LOW 31
Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS 3.1HIGH 7.3· Local · Low privileges · User interaction · EPSS 0.00169 · Published 2023-08-11 · No fix listed CWE-427
Priority LOW 30
Improper buffer restrictions in the Intel(R) Stratix(R) 10 FPGA firmware provided with the Intel(R) Quartus(R) Prime Pro software before version 20.1 may allow an unauthenticated user to potentially enable escalation of…
CVSS 3.1MEDIUM 6.8· Physical · No auth · No interaction · EPSS 0.00367 · Published 2020-11-12 · No fix listed
Load more