Skip to content
OpenAdvisories

Archive

May 2019

Vulnerabilities first published in this month (UTC), newest first.

1,337 results · Feed

  • Unscored —

    An issue was discovered in OpenEMR before 5.0.1 Patch 7. SQL Injection exists in the SaveAudit function in /portal/lib/…

  • Unscored —

    An information disclosure issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11…

  • Unscored —

    An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/downlo…

  • Unscored —
    CVE-2018-17179 Public exploit EPSS 13%

    An issue was discovered in OpenEMR before 5.0.1 Patch 7. There is SQL Injection in the make_task function in /interface…

  • Unscored —

    An Incorrect Access Control (issue 2 of 3) issue was discovered in GitLab Community and Enterprise Edition 8.14 and lat…

  • Unscored —

    An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x befor…

  • Unscored —

    An Improper Input Validation issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x befo…

  • Unscored —

    Improper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software version 20.100 and earlier m…

  • Unscored —

    Code injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 and In…

  • Unscored —

    Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged…

  • Unscored —

    Insufficient access control vulnerability in subsystem for Intel(R) CSME before versions 11.x, 12.0.35 Intel(R) TXE 3.x…

  • Unscored —

    Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow a…

  • Unscored —

    Insufficient input validation in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067…

  • Unscored —

    Insufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor, Intel(R) Xeon(R) Pro…

  • Unscored —

    Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, …

  • Unscored —

    Insufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.…

  • Unscored —

    A race condition in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15…

  • Unscored —

    Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may a…

  • Unscored —

    Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Int…

  • Unscored —

    Improper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04.00.04.381.0, SPS_E3_04.…

  • Unscored —

    An out of bound read in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067) and 10.…

  • Unscored —

    Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Pro…

  • Unscored —

    Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially e…

  • Unscored —

    Insufficient access control vulnerability in Dynamic Application Loader software for Intel(R) CSME before versions 11.8…

  • Unscored —

    Insufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, …

  • Unscored —

    Insufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions 11.8.65, 11.11.65, 11.…

  • Unscored —

    Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable e…

  • Unscored —

    Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may…

  • Unscored —

    Data Corruption in Intel Unite(R) Client before version 3.3.176.13 may allow an unauthenticated user to potentially cau…

  • Unscored —

    Improper directory permissions in Intel(R) ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to…

  • Unscored —

    A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enab…

  • Unscored —

    Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to pot…

  • Unscored —

    Insufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privileged …

  • Unscored —

    Insufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before may allow a privilege…

  • Unscored —

    Unquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129 and earlier may allow …

  • Unscored —

    Insufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated user to potentially e…

  • Unscored —

    Insufficient input validation in Kernel Mode Driver in Intel(R) i915 Graphics for Linux before version 5.0 may allow an…

  • Unscored —

    An Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 6.0 and later but before 11…

  • Medium 5.6

    During HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var/lib/ovirt-hosted-engine-…

  • Unscored —

    Untrusted search path vulnerability in Electronic reception and examination of application for radio licenses Offline 1…