Archive
17 November 2021
Vulnerabilities first published on this day (UTC), newest first.
106 results · Feed
-
Medium 6.7
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …
-
Medium 6.7
Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…
-
Unscored —
Incorrect default permissions in the installer for the Intel(R) oneAPI Rendering Toolkit before version 2021.2 may allo…
-
Unscored —
Time-of-check time-of-use vulnerability in the Crypto API Toolkit for Intel(R) SGX may allow a privileged user to poten…
-
Unscored —
Improper initialization in the installer for some Intel(R) Graphics DCH Drivers for Windows 10 before version 27.20.100…
-
Unscored —
Improper access control in the installer for some Intel(R) Iris(R) Xe MAX Dedicated Graphics Drivers for Windows 10 bef…
-
Unscored —
Out-of-bounds write in firmware for some Intel(R) NUCs may allow an authenticated user to potentially enable denial of …
-
Unscored —
Incorrect default permissionsin the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC10i3FN, NU…
-
Unscored —
Improper access control in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC8i3BE, NUC8i5BE…
-
Unscored —
Improper authentication in the software installer for the Intel(R) NUC HDMI Firmware Update Tool for NUC7i3DN, NUC7i5DN…
-
Unscored —
Improper authentication in the installer for the Intel(R) NUC M15 Laptop Kit Management Engine driver pack before versi…
-
Unscored —
Unquoted search path in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack before versi…
-
Unscored —
Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Keyboard LED Service driver pack be…
-
Unscored —
Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit Serial IO driver pack before versio…
-
Unscored —
Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit HID Event Filter driver pack before …
-
Unscored —
Insecure inherited permissions in the installer for the Intel(R) NUC M15 Laptop Kit audio driver pack before version 1.…
-
Unscored —
Incorrect default permissions in the installer for the Intel(R) NUC M15 Laptop Kit Integrated Sensor Hub driver pack be…
-
Unscored —
Integer overflow in the Safestring library maintained by Intel(R) may allow an authenticated user to potentially enable…
-
Medium 4.8
Contact Form Email <= 1.3.24 Authenticated Stored Cross-Site Scripting
The Contact Form Email WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and escaping via the name parameter found in the ~/trunk/cp-admin-int-list.inc.php file which allowed attackers with administrative user …
-
Unscored —
Styra Open Policy Agent (OPA) Gatekeeper through 3.7.0 mishandles concurrency, sometimes resulting in incorrect access …
-
Low 3.1
OSIsoft PI Vision
PI Vision could disclose information to a user with insufficient privileges for an AF attribute that is the child of another attribute and is configured as a Limits property.
-
Medium 6.5
OSIsoft PI Vision
A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impac…
-
High 7.2
Authentication Bypass Vulnerability Vulnerability in Retail Operations Product and Counterparty Settlement and Billing (CSB)
Improper Access Control vulnerability in the application authentication and authorization of Hitachi Energy Retail Operations, Counterparty Settlement and Billing (CSB) allows an attacker to execute a modified signed Java Applet JAR file. A successful exploit…
-
High 7.6
Starter Templates — Elementor, Gutenberg & Beaver Builder Templates <= 2.7.0 Authenticated Block Import to Stored XSS
On sites that also had the Elementor plugin for WordPress installed, it was possible for users with the edit_posts capability, which includes Contributor-level users, to import blocks onto any page using the astra-page-elementor-batch-process AJAX action. An …
-
High 8.8
WordPress Popular Posts <= 5.3.2 Authenticated Arbitrary File Upload
The WordPress Popular Posts WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/src/Image.php file which makes it possible for attackers with contributor level access and above to upload malic…
-
Unscored —
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows XSS.
-
Unscored —
SmarterTools SmarterMail 16.x through 100.x before 100.0.7803 allows remote code execution.
-
Unscored —
In the Linux kernel through 5.15.2, hw_atl_utils_fw_rpc_wait in drivers/net/ethernet/aquantia/atlantic/hw_atl/hw_atl_ut…
-
Unscored —
This module enables users to authenticate through their Microsoft Azure AD account. The module does not sufficiently ch…
-
High 7.5
Adobe Campaign Path Traversal Leads to Information Exposure
Adobe Campaign version 21.2.1 (and earlier) is affected by a Path Traversal vulnerability that could lead to reading arbitrary server files. By leveraging an exposed XML file, an unauthenticated attacker can enumerate other files on the server.
-
Medium 6.5
Possible log injection
Improper output neutralization for Logs. A specific Apache Superset HTTP endpoint allowed for an authenticated user to forge log entries or inject malicious content into logs.
-
Medium 6.2
IBM SPSS Statistics for Windows 24.0, 25.0, 26.0, 27.0, 27.0.1, and 28.0 could allow a local user to cause a denial of …
-
Medium 6.2
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in EFS to expose sens…
-
Medium 6.2
IBM AIX 7.1, 7.2, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the libc.a library…
-
High 7.3
Zoho Remote Access Plus Server Windows Desktop binary fixed in version 10.1.2132 is affected by an unauthorized passwor…
-
High 7.8
Zoho Remote Access Plus Server Windows Desktop Binary fixed from 10.1.2121.1 is affected by incorrect access control. T…
-
High 7.8
Zoho Remote Access Plus Server Windows Desktop Binary fixed in 10.1.2132.6 is affected by a sensitive information discl…
-
Medium 5.0
An exposure of sensitive information to an unauthorized actor vulnerability in FortiOS CLI 7.0.0, 6.4.0 through 6.4.6, …
-
Unscored —
The Company's Recruitment Management System in id=2 of the parameter from view_vacancy app on-page appears to be vulner…
-
Unscored —
Shared Files < 1.6.61 - Admin+ Stored Cross-Site Scripting
The Shared Files WordPress plugin before 1.6.61 does not sanitise and escape the Download Counter Text settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed