Archive
11 November 2022
Vulnerabilities first published on this day (UTC), newest first.
91 results · Feed
-
Medium 6.2
Out-of-bounds read in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a privile…
-
Medium 6.8
Improper input validation in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a …
-
Medium 6.8
Improper authentication in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow a pr…
-
Medium 4.3
Improper buffer restrictions in the Hyperscan library maintained by Intel(R) all versions downloaded before 04/29/2022 …
-
High 8.0
Out-of-bounds write in some Intel(R) XMM(TM) 7560 Modem software before version M2_7560_R_01.2146.00 may allow an unaut…
-
High 8.8
Protection mechanism failure in the Intel(R) DCM software before version 5.0 may allow an unauthenticated user to poten…
-
Medium 5.3
Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Toolkit may allow an authenticated user to poten…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) Quartus Prime Standard edition software before version 21.1 Patch 0.02…
-
Medium 6.5
XML injection in the Quartus(R) Prime Programmer included in the Intel(R) Quartus Prime Pro and Standard edition softwa…
-
Low 2.5CVE-2022-27499 Public exploit
Premature release of resource during expected lifetime in the Intel(R) SGX SDK software may allow a privileged user to …
-
Medium 6.7
Uncontrolled search path element in the Intel(R) Glorp software may allow an authenticated user to potentially enable e…
-
Medium 4.3
Improper authentication in the Intel(R) SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially …
-
Medium 6.7
Uncontrolled search path element in the PresentMon software maintained by Intel(R) before version 1.7.1 may allow an au…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) Advanced Link Analyzer Pro before version 22.2 and Standard edition so…
-
Low 3.8
Cross-site scripting in the Intel(R) EMA software before version 1.8.0 may allow a privileged user to potentially enabl…
-
Medium 4.4
Incorrect default permissions in the Intel(R) Support Android application before version v22.02.28 may allow a privileg…
-
Medium 5.9
Uncontrolled resource consumption in the Intel(R) Support Android application before version 22.02.28 may allow an auth…
-
High 7.3
Improper input validation in firmware for Intel(R) SPS before version SPS_E3_04.01.04.700.0 may allow an authenticated …
-
Medium 6.0
Missing release of memory after effective lifetime in firmware for Intel(R) SPS before versions SPS_E3_06.00.03.035.0 m…
-
High 8.1
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.…
-
High 7.4
Improper authentication in subsystem for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15…
-
High 8.6
Null pointer dereference in firmware for Intel(R) AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.…
-
High 8.7
Improper authentication in firmware for Intel(R) AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.…
-
High 8.2
Insufficiently protected credentials in software in Intel(R) AMT SDK before version 16.0.4.1, Intel(R) EMA before versi…
-
Medium 5.8
Stack Overflow in Snakeyaml
Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may suppor…
-
Low —
Container build can leak any path on the host into the container
### Description Moby is the open source Linux container runtime and set of components used to build a variety of downstream container runtimes, including Docker CE, Mirantis Container Runtime (formerly Docker EE), and Docker Desktop. Moby allows for building …
-
Medium 6.3
jerryhanjj ERP Commodity Management inventory.php uploadImages unrestricted upload
A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the function uploadImages of the file application/controllers/basedata/inventory.php of the component Commodity Management. The manipulation leads…
-
Low 3.5
sanluan PublicCMS Tab dwz.min.js initLink cross site scripting
A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.js of the component Tab Handler. The manipulation leads to cross site scripting. It is possible to launch the attack re…
-
Medium 4.3CVE-2022-3942 Public exploit
SourceCodester Sanitization Management System cross site scripting
A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic. This issue affects some unknown processing of the file php-sms/?p=request_quote. The manipulation leads to cross site scripting. The attack may be initia…
-
Low 3.5
lanyulei ferry task.go path traversal
A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument file_name leads to path traversal. The associated identifier of this vulnerabili…
-
Critical 9.4
Improper Restriction of Excessive Authentication Attempts in kareadita/kavita
Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.
-
Medium 4.3
GPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leak
A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack ca…
-
Medium 6.3
eolinker goku_lite getList sql injection
A vulnerability classified as critical was found in eolinker goku_lite. This vulnerability affects unknown code of the file /plugin/getList. The manipulation of the argument route/keyword leads to sql injection. The attack can be initiated remotely. The explo…
-
Medium 6.3
lanyulei ferry API file.go path traversal
A vulnerability, which was classified as critical, has been found in lanyulei ferry. Affected by this issue is some unknown functionality of the file apis/public/file.go of the component API. The manipulation of the argument file leads to path traversal. The …
-
High 7.3
tholum crm42 Login class.user.php sql injection
A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of the file crm42\class\class.user.php of the component Login. The manipulation of the argument user_name leads to sql injection. The attack m…
-
Low 2.6
ManyDesigns Portofino WarFileLauncher.java createTempDir temp file
A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function createTempDir of the file WarFileLauncher.java. The manipulation leads to creation of temporary file in directory with …
-
Low 3.5
ForU CMS cms_chip.php cross site scripting
A vulnerability was found in ForU CMS. It has been classified as problematic. Affected is an unknown function of the file cms_chip.php. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The expl…
-
Medium 5.3
Activity Log Plugin HTTP Header neutralization for logs
A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. …
-
Low 3.5CVE-2022-3949 Public exploit
Sourcecodester Simple Cashiering System User Account cross site scripting
A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unknown processing of the component User Account Handler. The manipulation of the argument fullname leads to cross site sc…
-
Medium 6.3
eolinker goku_lite list sql injection
A vulnerability classified as critical has been found in eolinker goku_lite. This affects an unknown part of the file /balance/service/list. The manipulation of the argument route/keyword leads to sql injection. It is possible to initiate the attack remotely.…