Archive
February 2023
Vulnerabilities first published in this month (UTC), newest first.
994 results · Clear filters · Feed
-
Medium 5.6
Improper authentication in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potenti…
-
Medium 5.5
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potenti…
-
Medium 6.7
Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potenti…
-
Medium 5.9
Improper conditions check in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to pot…
-
Medium 6.7
Improper access control in the Intel(R) FPGA SDK for OpenCL(TM) with Intel(R) Quartus(R) Prime Pro Edition software bef…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro and Standard Edition software may allow an authenticated…
-
Medium 4.4
Uncaught exception in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1436(v2) may allow a privi…
-
Medium 6.7
Uncontrolled search path in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authen…
-
Medium 4.4
Out-of-bounds read in the Intel(R) Iris(R) Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privilege…
-
Medium 6.0
Out-of-bounds read in firmware for the Intel(R) Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and…
-
Medium 6.0
Improper condition check in some Intel(R) SPS firmware before version SPS_E3_06.00.03.300.0 may allow a privileged user…
-
Medium 6.7
Improper authentication in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) MPI Library before version 2021.6 for Intel(R) oneAPI HPC Toolkit may …
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI DPC++/C++ Compiler Runtime before version 2022.0 may allow an a…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) Distribution for Python programming language before version 2022.1 for…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Deep Neural Network (oneDNN) before version 2022.1 may allow an…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Collective Communications Library (oneCCL) before version 2021.…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before version 2021.5 for Intel…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) oneAPI Toolkit OpenMP before version 2022.1 may allow an authenticated…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) Trace Analyzer and Collector before version 2021.6 for Intel(R) oneAPI…
-
Medium 6.7
Uncontrolled search path element in the Intel(R) FPGA Add-on for Intel(R) oneAPI Base Toolkit before version 2022.2 may…
-
Medium 4.2
Go-Getter Vulnerable to Decompression Bombs
HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0.
-
Medium 5.4
A use of password hash with insufficient computational effort vulnerability [CWE-916] in FortiSandbox before 4.2.0 may …
-
Medium 6.7
Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC 9.4.1 and below…
-
Medium 4.0
A improper neutralization of crlf sequences in http headers ('http response splitting') vulnerability in Fortinet Forti…
-
Medium 6.0
Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, …
-
Medium 6.9
An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC ver…
-
Medium 4.0
An improper privilege management vulnerability [CWE-269] in Fortinet FortiOS version 7.2.0 and before 7.0.7 and FortiPr…
-
Medium 4.4
An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all…
-
Medium 4.2
An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiAnalyzer versions prior t…
-
Medium 5.8
Multiple improper neutralization of input during web page generation ('Cross-site Scripting') vulnerabilities [CWE-79] …
-
Medium 4.7
A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all version…
-
Medium 6.6
Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CW…
-
Medium 6.3
A stack-based buffer overflow vulnerability [CWE-121] in the CA sign functionality of FortiWeb version 7.0.1 and below,…
-
Medium 6.3
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version …
-
Medium 6.1
A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.…
-
Medium 6.5
A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all version…
-
Medium 5.6
A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, Fort…
-
Medium 5.0
A path traversal vulnerability [CWE-23] in the API of FortiWeb 7.0.0 through 7.0.1, 6.3.0 through 6.3.19, 6.4 all versi…
-
Medium 4.1
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and be…