Archive
11 August 2023
Vulnerabilities first published on this day (UTC), newest first.
61 results · Clear filters · Feed
-
Medium 5.4
An XML External Entity injection vulnerability
XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity (XXE) injection, which can be used for instance to force Horizon to make arbitrary HTTP requests to inte…
-
Medium 6.4
OpenText / Micro Focus ArcSight Management Center Remote Vulnerability
A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited.
-
Medium 4.8
Cross site scripting vulnerabilities in Snow License Manager
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser
-
Medium 4.5
Audit logging fails to sanitize post metadata
Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged
-
Medium 6.7
Incorrect authorization allows a user manager to update a system admin
Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details such as email, first name and last name.
-
Medium 6.3
A guest user can perform various actions on public playbooks
Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join, edit, export and archive public playbooks.
-
Medium 6.0
Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.…
-
Medium 6.7
Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentiall…
-
Medium 6.7
Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to …
-
Medium 6.7
Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authe…
-
Medium 4.6
Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privi…
-
Medium 5.0
Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated us…
-
Medium 6.0
Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of …
-
Medium 6.0
Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable info…
-
Medium 6.0
Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable informatio…
-
Medium 6.0
Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 P…
-
Medium 4.4
Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.…
-
Medium 4.4
Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 m…
-
Medium 5.3
Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.…
-
Medium 5.3
Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.…
-
Medium 6.7
Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to po…
-
Medium 6.7
Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3…
-
Medium 6.7
Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated …
-
Medium 5.5
Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user…
-
Medium 5.3
Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privileg…
-
Medium 6.1
Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable infor…
-
Medium 6.7
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may…
-
Medium 6.7
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may …
-
Medium 5.5
Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an …
-
Medium 6.7
Improper access control in the Intel® DTT Software before version 8.7.10400.15482 may allow an authenticated user to po…
-
Medium 6.7
Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user t…
-
Medium 6.7
Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to pote…
-
Medium 4.4
Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileg…
-
Medium 6.6
Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user…
-
Medium 6.7
Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before versi…
-
Medium 6.7
Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an auth…
-
Medium 6.7
Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an …
-
Medium 5.5
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to potentially enable escalation of privilege via local access.
-
Medium 6.0
Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to pote…
-
Medium 6.5
Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may a…