Archive
16 February 2023
Vulnerabilities first published on this day (UTC), newest first.
172 results · Feed
-
Medium 4.4
Uncaught exception in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1436(v2) may allow a privi…
-
Medium 6.7
Uncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authen…
-
Medium 4.4
Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privilege…
-
High 8.2
Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authent…
-
High 8.2
Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may all…
-
High 7.5
Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to pote…
-
High 7.8
Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to pot…
-
Medium 6.0
Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and…
-
Medium 6.0
Improper condition check in some Intel(R) SPS firmware before version SPS_E3_06.00.03.300.0 may allow a privileged user…
-
High 8.8
Active debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user t…
-
High 7.2
Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to poten…
-
High 7.5
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …
-
High 7.5
Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…
-
High 7.5
Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable esca…
-
High 8.2
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…
-
Medium 6.7
Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user…
-
Low 2.8
Cross-site scripting in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to…
-
High 7.3
Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authe…
-
High 7.3
Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user…
-
High 7.3
Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to poten…
-
High 7.5
Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Proc…
-
Low 2.5
Insufficient control flow management for the Intel(R) SGX SDK software for Linux before version 2.16.100.1 may allow an…
-
Low 2.5
Improper conditions check in the Intel(R) SGX SDK software may allow a privileged user to potentially enable informatio…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R) oneAPI HPC Toolkit may …
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI DPC++/C++ Compiler Runtime before version 2022.0 may allow an a…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) Distribution for Python programming language before version 2022.1 for…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before version 2022.1 may allow an…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Collective Communications Library (oneCCL) before version 2021.…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before version 2021.5 for Intel…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit before version 2022.2 may…
-
High 7.5
Insecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticat…
-
High 8.3
Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before versio…
-
High 8.3
Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version…
-
Medium 4.2
Go-Getter Vulnerable to Decompression Bombs
HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.
-
High 7.5
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, when using the non-default "fallback" crypto back-end, ECC operations in `node-jose` can trigger a De…
-
High 8.0
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface…
-
Low 3.1
A missing cryptographic steps vulnerability [CWE-325] in the functions that encrypt the DHCP and DNS keys in Fortinet F…
-
Medium 5.4
A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may …