Archive
9 June 2021
Vulnerabilities first published on this day (UTC), newest first.
184 results · Feed
-
Unscored —
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enabl…
-
Unscored —
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially e…
-
High 7.8
Out of bounds read in the firmware for some Intel(R) Processors may allow an authenticated user to potentially enable e…
-
Unscored —
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
Unscored —
Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable deni…
-
Medium 6.8
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to …
-
Unscored —
Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enabl…
-
Unscored —
Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalatio…
-
Unscored —
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
Unscored —
Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable esca…
-
Unscored —
Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable…
-
Unscored —
Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 m…
-
Unscored —
Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, …
-
Unscored —
Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.3…
-
Unscored —
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.…
-
Unscored —
Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially…
-
Unscored —
Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.0…
-
Unscored —
Uncontrolled search path element in the Intel(R) Processor Diagnostic Tool before version 4.1.5.37 may allow an authent…
-
Medium 6.1
Liferay DXP Vulnerable to Cross-Site Scripting (XSS) via the currentURL Parameter
Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before fix pack 23, 7.2 before fix pack 12 and 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script …
-
Unscored —
Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable …
-
Unscored —
Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentiall…
-
Unscored —
Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially ena…
-
Unscored —
Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially e…
-
Unscored —
Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to poten…
-
Unscored —
Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to poten…
-
Unscored —
Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially e…
-
Unscored —
Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to po…
-
Unscored —
Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authentic…
-
Unscored —
In Progress MOVEit Transfer before 2019.0.6 (11.0.6), 2019.1.x before 2019.1.5 (11.1.5), 2019.2.x before 2019.2.2 (11.2…
-
Unscored —
Battle.net.exe in Battle.Net 1.27.1.12428 suffers from an elevation of privileges vulnerability which can be used by an…
-
Unscored —
Multiple vulnerabilities exist in RaspAP 2.3 to 2.6.5 in the "interface", "ssid" and "wpa_passphrase" POST parameters i…
-
Unscored —
A vulnerability exists in RaspAP 2.6 to 2.6.5 in the "iface" GET parameter in /ajax/networking/get_netcfg.php, when the…
-
Unscored —
Multiple privilege escalation vulnerabilities in RaspAP 1.5 to 2.6.5 could allow an authenticated remote attacker to in…
-
Unscored —
A vulnerability exists in gowitness < 2.3.6 that allows an unauthenticated attacker to perform an arbitrary file read u…
-
Unscored —
ConnMan (aka Connection Manager) 1.30 through 1.39 has a stack-based buffer overflow in uncompress in dnsproxy.c via NA…
-
High 8.2
Cross-Site Request Forgery (CSRF) in FastAPI
FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints. FastAPI versions lower than 0.65.2 that used cookies for authentication in path operations that received JSON payloads sent by browsers were vulnerable to a Cro…
-
Medium 6.6
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowV…
-
Unscored —
Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security sca…
-
Unscored —
Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permis…
-
Unscored —
Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of intern…