Archive
18 August 2022
Vulnerabilities first published on this day (UTC), newest first.
35 results · Clear filters · Feed
-
High 7.8
Improper buffer restrictions in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privil…
-
High 7.8
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged …
-
High 7.8
Improper input validation in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privilege…
-
High 7.8
Improper buffer restriction in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privile…
-
High 7.5
Insufficiently protected credentials in the Intel(R) Datacenter Group Event iOS application, all versions, may allow an…
-
High 7.8
Uncontrolled search path in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated user t…
-
High 7.8
Incorrect default permissions in the installation binaries for Intel(R) SEAPI all versions may allow an authenticated u…
-
High 7.8
Insufficiently protected credentials in the installation binaries for Intel(R) SEAPI in all versions may allow an authe…
-
High 7.8
Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially en…
-
High 7.8
Uncontrolled search path in the Intel(R) Distribution for Python before version 2022.0.3 may allow an authenticated use…
-
High 8.0
Improper access control in the Intel(R) DSA software for before version 22.2.14 may allow an authenticated user to pote…
-
High 7.8
Uncontrolled search path elements in the Intel(R) Datacenter Group Event Android application, all versions, may allow a…
-
High 7.8
Uncontrolled search path element in the Intel(R) Enpirion(R) Digital Power Configurator GUI software, all versions may …
-
High 8.8
Improper access control in the Intel(R) Data Center Manager software before version 4.1 may allow an unauthenticated us…
-
High 7.8
Uncontrolled search path elements in the Intel(R) VTune(TM) Profiler software before version 2022.2.0 may allow an auth…
-
High 7.8CVE-2022-21812 Public exploit
Improper access control in the Intel(R) HAXM software before version 7.7.1 may allow an authenticated user to potential…
-
High 7.8
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…
-
High 7.8
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…
-
High 7.1
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before vers…
-
High 7.8
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products b…
-
High 7.5
Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to poten…
-
High 7.5
Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentia…
-
High 8.8
Inadequate encryption strength for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to pot…
-
High 8.8
Local Privilege Escalation in Auto Updater for Zoom Client for Meetings for macOS
The Zoom Client for Meetings for macOS (Standard and for IT Admin) starting with version 5.7.3 and before 5.11.6 contains a vulnerability in the auto update process. A local low-privileged user could exploit this vulnerability to escalate their privileges to …
-
High —
oqs's Post-Quantum Signature scheme Rainbow level I parametersets broken
Ward Beullens found a practical key-recovery attack against Rainbow. The level I parametersets are removed from liboqs starting from version `0.7.2`. Find the scientific details in [Breaking Rainbow Takes a Weekend on a Laptop](https://eprint.iacr.org/2022/21…
-
High 8.6
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
Vitejs Vite before v2.9.13 was discovered to allow attackers to perform a directory traversal via a crafted URL to the victim's service.
-
High 7.5CVE-2022-37422 Public exploit
Path Traversal in Payara
Payara through 5.2022.2 allows directory traversal without authentication. This affects Payara Server, Payara Micro, and Payara Server Embedded.
-
High 7.5
Bots using py-cord as discord api wrapper are vulnerable to shutdowns through remote code execution
py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the `application.commands` scope without the `bot` scope. Currently, it appears that al…
-
High 7.0
Remote denial of service in Hyperledger Fabric Gateway
Hyperledger Fabric is an enterprise-grade permissioned distributed ledger framework for developing solutions and applications. If a gateway client application sends a malformed request to a gateway peer it may crash the peer node. Version 2.4.6 checks for the…
-
High 8.0
Improper neutralization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user…
-
High 7.8
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged us…
-
High 7.8
Improper buffer restrictions for some Intel(R) NUC 9 Extreme Laptop Kit drivers before version 2.2.0.22 may allow an au…
-
High 7.5
nbconvert vulnerable to cross-site scripting (XSS) via multiple exploit paths
The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert. When using nbconvert to generate an HTML version of a user-controllable notebook, it is possible to inject arbitrary HTML which may lead to cross-sit…
-
High 7.8
Improper initialization for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user…
-
High 7.8
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user…