Archive
9 February 2022
Vulnerabilities first published on this day (UTC), newest first.
86 results · Clear filters · Feed
-
Medium 6.5
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) W…
-
Medium 6.7
Improper input validation in firmware for Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and Killer(TM) W…
-
Medium 4.4
Improper locking in the Power Management Controller (PMC) for some Intel Chipset firmware before versions pmc_fw_lbg_c1…
-
Medium 5.5
Insufficient control flow management in some Intel(R) Processors may allow an authenticated user to potentially enable …
-
Medium 6.6
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
Medium 6.7
Out-of-bounds read in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable an es…
-
Medium 5.5
Improper initialization of shared resources in some Intel(R) Processors may allow an authenticated user to potentially …
-
Medium 6.6
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
Medium 6.2
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
Medium 6.7
Unchecked return value in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable e…
-
Medium 5.5
Improper Validation of Specified Index, Position, or Offset in Input in firmware for some Intel(R) PROSet/Wireless Wi-F…
-
Medium 6.7
Buffer overflow in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalati…
-
Medium 6.7
NULL pointer dereference in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable…
-
Medium 4.4
Improper access control in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable …
-
Medium 6.7
Insufficient control flow management in the firmware for some Intel(R) Processors may allow a privileged user to potent…
-
Medium 4.4
Incorrect default permissions in the firmware for some Intel(R) Processors may allow a privileged user to potentially e…
-
Medium 5.5
Improper input validation in firmware for some Intel(R) PROSet/Wireless Wi-Fi in multiple operating systems and some Ki…
-
Medium 6.6
Insufficient compartmentalization in HECI subsystem for the Intel(R) SPS before versions SPS_E5_04.01.04.516.0, SPS_E5_…
-
Medium 6.3
Array literal misordering in github.com/open-policy-agent/opa
OPA is an open source, general-purpose policy engine. Under certain conditions, pretty-printing an abstract syntax tree (AST) that contains synthetic nodes could change the logic of some statements by reordering array literals. Example of policies impacted ar…
-
Medium 5.5
Missing authorization in xwiki-platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can read any file located in the XWiki WAR (for example xwiki.cfg and xwiki.properties) through XWiki#invo…
-
Medium 6.8
Path traversal in xwiki-platform-skin-skinx
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions AbstractSxExportURLFactoryActionHandler#processSx does not escape anything from SSX document references when serializing it on filesy…
-
Medium 5.3
Information exposure in xwiki-platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to guess if a user has an account on the wiki by using the "Forgot your password" form, even if the wiki is closed to g…
-
Medium 4.7
Open Redirect in xwiki-platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions there is no protection against URL redirection to untrusted sites, in particular some well known parameters (xredirect) can be used t…
-
Medium 6.5
Missing authorization in xwiki-platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit right can copy the content of a page it does not have access to by using it as template of a new page. This issue …
-
Medium 5.4
Partial authorization bypass on document save in xwiki-platform
XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with SCRIPT right can save a document with the right of the current user which allow accessing API requiring programming rig…
-
Medium 4.7
Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticit…
-
Medium 6.9
Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An au…
-
Medium 5.3
Microsoft Outlook for Mac Security Feature Bypass Vulnerability
Microsoft Outlook for Mac Security Feature Bypass Vulnerability
-
Medium 6.5
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
Microsoft Dynamics GP Elevation Of Privilege Vulnerability
-
Medium 5.4
Microsoft Dynamics GP Spoofing Vulnerability
Microsoft Dynamics GP Spoofing Vulnerability
-
Medium 5.9
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
Microsoft OneDrive for Android Security Feature Bypass Vulnerability
-
Medium 4.9
Microsoft Power BI Information Disclosure Vulnerability
Microsoft Power BI Information Disclosure Vulnerability
-
Medium 5.5
Microsoft Office Information Disclosure Vulnerability
Microsoft Office Information Disclosure Vulnerability
-
Medium 5.5
Microsoft Excel Information Disclosure Vulnerability
Microsoft Excel Information Disclosure Vulnerability
-
Medium 5.6
Windows Hyper-V Denial of Service Vulnerability
Windows Hyper-V Denial of Service Vulnerability
-
Medium 5.5
Windows Common Log File System Driver Denial of Service Vulnerability
Windows Common Log File System Driver Denial of Service Vulnerability
-
Medium 5.5
Windows User Account Profile Picture Denial of Service Vulnerability
Windows User Account Profile Picture Denial of Service Vulnerability
-
Medium 5.5
Windows Common Log File System Driver Information Disclosure Vulnerability
Windows Common Log File System Driver Information Disclosure Vulnerability
-
Medium 5.5
Windows Remote Access Connection Manager Information Disclosure Vulnerability
Windows Remote Access Connection Manager Information Disclosure Vulnerability
-
Medium 4.3
Microsoft SharePoint Server Security Feature Bypass Vulnerability
Microsoft SharePoint Server Security Feature Bypass Vulnerability