Archive
16 February 2023
Vulnerabilities first published on this day (UTC), newest first.
54 results · Clear filters · Feed
-
High 7.8
Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated …
-
High 7.3
Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may…
-
High 8.4
Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an au…
-
High 7.2
Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using …
-
High 7.5
Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated use…
-
High 7.1
Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to poten…
-
High 7.4
Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to pot…
-
High 7.7
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to poten…
-
High 8.2
Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authent…
-
High 8.2
Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may all…
-
High 7.5
Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to pote…
-
High 7.8
Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to pot…
-
High 8.8
Active debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user t…
-
High 7.2
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to poten…
-
High 7.5
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …
-
High 7.5
Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…
-
High 7.5
Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable esca…
-
High 8.2
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…
-
High 7.3
Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authe…
-
High 7.3
Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user…
-
High 7.3
Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to poten…
-
High 7.5
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Proc…
-
High 7.5
Insecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticat…
-
High 8.3
Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before versio…
-
High 8.3
Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version…
-
High 7.5
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in `node-jose` can trigger a De…
-
High 8.0
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface…
-
High 7.1
A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or comm…
-
High 7.2
A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.…
-
High 7.4
An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, …
-
High 7.4
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versi…
-
High 7.0
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender …
-
High 8.6
An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.…
-
High 8.6
An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 al…
-
High 7.1
A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, F…
-
High 7.6
A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through…
-
High 7.4
A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb ver…
-
High 8.5
A condition for session fixation vulnerability [CWE-384] in the session management of FortiWeb versions 6.4 all version…
-
High 8.6
An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.…
-
High 8.6
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 a…