Archive
18 August 2022
Vulnerabilities first published on this day (UTC), newest first.
31 results · Clear filters · Feed
-
Medium 6.9
Improper initialization in the firmware for some Intel(R) NUC Laptop Kits before version BC0076 may allow a privileged …
-
Medium 5.5
Insufficiently protected credentials in the Intel(R) Team Blue mobile application in all versions may allow an authenti…
-
Medium 4.4
Incomplete cleanup in a firmware subsystem for Intel(R) SPS before versions SPS_E3_04.08.04.330.0 and SPS_E3_04.01.04.5…
-
Medium 5.5
Improper input validation in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated us…
-
Medium 5.5
Improper initialization in the Intel(R) Data Center Manager software before version 4.1 may allow an authenticated user…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated u…
-
Medium 5.5
Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…
-
Medium 5.5
Insufficient control flow management in the Intel(R) Ethernet 500 Series Controller drivers for VMWare before version 1…
-
Medium 5.5
Out of bounds read in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products before vers…
-
Medium 5.5
Improper buffer restrictions in firmware for some Intel(R) Wireless Bluetooth(R) and Killer(TM) Bluetooth(R) products b…
-
Medium 5.5
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user…
-
Medium 6.5
Improper input validation for some Intel(R) PROSet/Wireless WiFi products may allow an unauthenticated user to potentia…
-
Medium 4.4
Out of bounds read for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable in…
-
Medium 6.7
Out of bounds write for some Intel(R) PROSet/Wireless WiFi products may allow a privileged user to potentially enable e…
-
Medium 5.5
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow a privileged user to p…
-
Medium 5.5
Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenti…
-
Medium 4.4
Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.1.9 may allow a …
-
Medium 4.4
Improper access control in the firmware for some Intel(R) E810 Ethernet Controllers before version 1.6.0.6 may allow a …
-
Medium 4.4
Improper access control in the firmware for some Intel(R) 700 and 722 Series Ethernet Controllers and Adapters before v…
-
Medium —
oqs's Post-Quantum Key Encapsulation Mechanism SIKE broken
Wouter Castryck and Thomas Decru presented an efficient key recovery attack on the SIDH protocol. As a result, the secret key of SIKEp751 can be recovered in a matter of hours. The SIKE and SIDH schemes will be removed from oqs 0.7.2. [An efficient key recove…
-
Medium —
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
### Impact The default landing page contained HTML to display a sample `curl` command which is made visible if the full landing page bundle could not be fetched from Apollo's CDN. The server's URL is directly interpolated into this command inside the browser …
-
Medium 5.2
Improper KubeConfig handling allows arbitrary code execution
The GitOps Tools Extension for VSCode relies on kubeconfigs in order to communicate with Kubernetes clusters. A specially crafted kubeconfig leads to arbitrary code execution on behalf of the user running VSCode. Users relying on kubeconfigs that are generate…
-
Medium 5.4
Cross site scripting in getkirby/starterkit
A stored cross-site scripting (XSS) vulnerability in Kirby's Starterkit v3.7.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Tags field.
-
Medium 6.3
SourceCodester Student Management System index.php sql injection
A vulnerability, which was classified as critical, was found in SourceCodester Student Management System. Affected is an unknown function of the file index.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack re…
-
Medium 6.8
Improper access control in firmware for Intel(R) AMT and Intel(R) Standard Manageability may allow an unauthenticated u…
-
Medium 6.6
NULL Pointer Dereference in vim/vim
NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.0224.
-
Medium 5.5
Insufficiently protected credentials for Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user t…
-
Medium 5.5
Improper isolation of shared resources in some Intel(R) Processors may allow a privileged user to potentially enable in…
-
Medium 5.5
Non-transparent sharing of return predictor targets between contexts in some Intel(R) Processors may allow an authorize…
-
Medium 6.5
Improper input validation for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthentica…
-
Medium 6.5
Out of bounds read for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi products may allow an unauthenticated use…