Archive
June 2019
Vulnerabilities first published in this month (UTC), newest first.
1,303 results · Feed
-
Unscored —
HiSuite 9.1.0.300 versions and earlier contains a DLL hijacking vulnerability. This vulnerability exists due to some DL…
-
Unscored —
There is a reflection XSS vulnerability in the HedEx products. Remote attackers send malicious links to users and trick…
-
Unscored —
A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code…
-
Unscored —
Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.4…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may …
-
Unscored —
Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before …
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical addr…
-
Unscored —
Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enabl…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unau…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Insufficient session validation in the service API for Intel(R) RWC3 version 4.186 and before may allow an unauthentica…
-
Unscored —
Insufficient session validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enab…
-
Unscored —
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable…
-
Unscored —
Pointer corruption in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation…
-
Unscored —
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escal…
-
Unscored —
Buffer overflow in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escalation of…
-
Unscored —
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentiall…
-
Unscored —
Improper permissions in the installer for Intel(R) Omni-Path Fabric Manager GUI before version 10.9.2.1.1 may allow an …
-
Unscored —
Out of bound read/write in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable escal…
-
Unscored —
Insufficient input validation in system firmware for Intel(R) NUC Kit may allow a privileged user to potentially enable…
-
Unscored —
Insufficient input validation in HECI subsystem in Intel(R) CSME before version 11.21.55, Intel® Server Platform Servic…
-
Unscored —
Improper permissions in the installer for the ITE Tech* Consumer Infrared Driver for Windows 10 versions before 5.4.3.0…
-
High —
Command Injection in fs-path
All versions of `fs-path` are vulnerable to command injection is unsanitized user input is passed in. ## Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until a fix is available.
-
Medium —
Out-of-bounds Read in npmconf
Versions of `npmconf` before 2.1.3 allocate and write to disk uninitialized memory contents when a typed number is passed as input on Node.js 4.x. ## Recommendation Update to version 2.1.3 or later. Consider switching to another config storage mechanism, as n…
-
Medium —
SQL Injection in sql
All versions of `sql` are vulnerable to sql injection as it does not properly escape parameters when building SQL queries. ## Recommendation No fix is currently available for this vulnerability. It is our recommendation to not install or use this module until…
-
Unscored —
Under certain conditions the PI Integration Builder Web UI of SAP NetWeaver Process Integration (versions: SAP_XIESR: 7…
-
Unscored —
Automotive Dealer Portal in SAP R/3 Enterprise Application (versions: 600, 602, 603, 604, 605, 606, 616, 617) does not …
-
Unscored —
Several web pages provided SAP NetWeaver Process Integration (versions: SAP_XIESR: 7.10 to 7.11, 7.20, 7.30, 7.31, 7.40…
-
Unscored —
SAP Work Manager, versions: 6.3, 6.4, 6.5 and SAP Inventory Manager, version 4.3, allows an attacker to prevent legitim…
-
Unscored —
Adobe Flash Player versions 32.0.0.192 and earlier, 32.0.0.192 and earlier, and 32.0.0.192 and earlier have an use afte…
-
Unscored —CVE-2019-7840 EPSS 17%
ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a deserialization of un…
-
Unscored —
ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a command injection vul…
-
Unscored —CVE-2019-7838 EPSS 17%
ColdFusion versions Update 3 and earlier, Update 10 and earlier, and Update 18 and earlier have a file extension blackl…