Archive
February 2021
Vulnerabilities first published in this month (UTC), newest first.
1,464 results · Feed
-
Unscored —
Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potenti…
-
Unscored —
Integer overflow in some Intel(R) Graphics Drivers before version 26.20.100.8476 may allow a privileged user to potenti…
-
Unscored —
Improper access control in the Intel(R) HD Graphics Control Panel before version 15.40.46.5144 and 15.36.39.5143 may al…
-
Unscored —
Improper access control for Intel(R) Graphics Drivers before version 15.45.33.5164 and 27.20.100.8280 may allow an auth…
-
Unscored —
Out of bounds write in the Intel(R) Graphics Driver before version 15.33.53.5161, 15.36.40.5162, 15.40.47.5166, 15.45.3…
-
Unscored —
Use after free in some Intel(R) Graphics Drivers before version 15.33.51.5146 may allow an authenticated user to potent…
-
Unscored —
Insufficient control flow management in some Intel(R) Graphics Drivers before version 15.45.32.5145 may allow an authen…
-
Unscored —
Insufficient control flow management in the kernel mode driver for some Intel(R) Graphics Drivers before version 15.36.…
-
Unscored —
Improper conditions check in some Intel(R) Graphics Drivers before versions 26.20.100.8141, 15.45.32.5145 and 15.40.46.…
-
Unscored —
Improper input validation in the Intel(R) SGX Platform Software for Windows* may allow an authenticated user to potenti…
-
Unscored —
Improper input validation in the Intel(R) EPID SDK before version 8, may allow an authenticated user to potentially ena…
-
Unscored —
Incomplete cleanup in some Intel(R) PROSet/Wireless WiFi and Killer (TM) drivers before version 22.0 may allow a privil…
-
Unscored —
Out-of-bounds write in the Intel(R) XTU before version 6.5.3.25 may allow a privileged user to potentially enable denia…
-
Unscored —
Insecure inherited permissions for the Intel(R) Quartus Prime Pro and Standard edition software may allow an authentica…
-
Unscored —
Improper buffer restrictions in firmware for Intel(R) 7360 Cell Modem before UDE version 9.4.370 may allow unauthentica…
-
Unscored —
Debug message containing addresses of memory transactions in some Intel(R) 10th Generation Core Processors supporting S…
-
Unscored —
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged u…
-
Unscored —
Insufficient input validation in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 ma…
-
Unscored —
Insufficient input validation in the firmware for Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a pr…
-
Unscored —
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow an unauthentic…
-
Unscored —
Insufficient Access Control in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a …
-
Unscored —
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.4.3 may allow a …
-
Unscored —
Buffer overflow in the firmware for Intel(R) E810 Ethernet Controllers before version 1.4.1.13 may allow a privileged u…
-
Unscored —
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 7.3 may …
-
Unscored —
Insufficient access control in the firmware for the Intel(R) 700-series of Ethernet Controllers before version 8.0 may …
-
Unscored —
Insufficient access control in the firmware for the Intel(R) 722 Ethernet Controllers before version 1.5 may allow a pr…
-
Unscored —
Incorrect default permissions in installer for the Intel(R) SSD Toolbox versions before 2/9/2021 may allow a privileged…
-
Unscored —
Insufficient access control in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may allow an …
-
Unscored —
Improper input validation in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 and before vers…
-
Unscored —
Uncontrolled resource consumption in some Intel(R) Ethernet E810 Adapter drivers for Linux before version 1.0.4 may all…
-
Unscored —
Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authen…
-
Unscored —
Improper conditions check in the Intel(R) FPGA OPAE Driver for Linux before kernel version 4.17 may allow an authentica…
-
High 7.5
Soar Cloud System Co., Ltd. HR Portal - SQL Injection
The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege.
-
Critical 9.8
Soar Cloud System Co., Ltd. HR Portal - Arbitrary Code Execution
The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands.
-
Medium 5.4
Soar Cloud System Co., Ltd. HR Portal - Broken Access Control
The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work.
-
High 8.0
The EFM ipTIME C200 IP Camera is affected by a Command Injection vulnerability in /login.cgi?logout=1 script. To exploi…
-
High 8.0
UPRISM CURIX arbitrary code execution vulnerability
A vulnerability of uPrism.io CURIX(Video conferecing solution) could allow an unauthenticated attacker to execute arbitrary code. This vulnerability is due to insufficient input(server domain) validation. An attacker could exploit this vulnerability through c…
-
Medium 6.5
Heap Memory exhaustion in Gerrit
Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend…
-
High 7.5
ChanGate EnterPrise Co., Ltd property management system - Directory Traversal
The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily.
-
High 8.8
ChanGate EnterPrise Co., Ltd property management system - Broken Authentication
Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions.