Archive
18 August 2022
Vulnerabilities first published on this day (UTC), newest first.
130 results · Feed
-
Critical 9.8
OmniAuth's `lib/omniauth/failure_endpoint.rb` does not escape `message_key` value
lib/omniauth/failure_endpoint.rb in OmniAuth before 1.9.2 (and before 2.0) does not escape the message_key value.
-
Critical 9.8
Use of Hard-coded Credentials in AgileConfig.Client
Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.
-
Unscored —
Unsafe Parsing of a PNG tRNS chunk in FastStone Image Viewer through 7.5 results in a stack buffer overflow.
-
Unscored —
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privilege…
-
Medium 6.9
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged …
-
High 7.8
Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privil…
-
High 7.8
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged …
-
High 7.8
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privilege…
-
High 7.8
Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privile…
-
Medium 5.5
Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authenti…
-
High 7.5
Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an…
-
High 7.8
Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user t…
-
High 7.8
Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated u…
-
High 7.8
Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authe…
-
Critical 9.8
Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 ma…
-
High 7.8
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially en…
-
High 7.8
Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated use…
-
High 8.0
Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to pote…
-
High 7.8
Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow a…
-
High 7.8
Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may …
-
Medium 4.4
Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.5…
-
Medium 5.5
Improper input validation in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated us…
-
Unscored —
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /sta…
-
Unscored —
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the title parameter at /libr…
-
Unscored —
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /sta…
-
Unscored —
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /stude…
-
Unscored —
Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /libra…
-
Medium 5.5
Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user…
-
High 8.8
Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated us…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated u…
-
High 7.8
Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an auth…
-
High 7.8CVE-2022-21812 Public exploit
Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potential…
-
Medium 5.5
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…
-
High 7.8
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…
-
High 7.8
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…
-
Critical 9.8
Improper authentication in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an unauthe…
-
Medium 5.5
Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1…
-
High 7.1
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before vers…
-
Medium 5.5
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before vers…
-
Medium 5.5
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products b…