Skip to content
OpenAdvisories

Archive

12 May 2022

Vulnerabilities first published on this day (UTC), newest first.

159 results · Feed

  • Unscored —

    A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, re…

  • Medium 4.3

    A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.3…

  • Critical 9.9

    Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Netwo…

  • Critical 9.9

    Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Netwo…

  • Critical 9.9

    Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Netwo…

  • Critical 9.9

    An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 …

  • Critical 9.9

    A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.3…

  • Critical 9.9

    An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302…

  • Critical 9.9
    CVE-2022-26085 EPSS 13%

    An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.…

  • Critical 9.9

    An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302…

  • Critical 9.9

    An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.…

  • Medium 6.3

    An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRo…

  • Critical 9.1

    An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4…

  • Critical 9.1

    A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 …

  • Critical 9.9

    A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A s…

  • High 7.5

    An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InR…

  • High 8.2

    A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 …

  • Critical 9.9

    A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specia…

  • Medium 5.4

    A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. …

  • High 7.4

    A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRoute…

  • Medium 5.0

    An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-craf…

  • High 8.8

    An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.103…

  • Medium 5.5

    Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena…

  • High 7.8

    Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privile…

  • High 7.8

    Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged use…

  • Medium 6.7

    Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user …

  • High 7.8

    Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to pot…

  • Medium 6.7

    Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to p…

  • High 7.8

    Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…

  • High 7.8

    Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable …

  • High 7.8

    Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user …

  • High 7.8

    Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  • High 7.8

    Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable…

  • Medium 5.5

    Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an auth…

  • Medium 5.5

    Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable inform…

  • Low 2.4

    Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow …

  • Medium 5.5

    Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow…

  • Medium 6.8

    Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) B…

  • Medium 4.6

    Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SS…

  • Unscored —

    Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Inte…