Skip to content
OpenAdvisories

Archive

11 August 2023

Vulnerabilities first published on this day (UTC), newest first.

61 results · Clear filters · Feed

  • Medium 6.7

    Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Ser…

  • Medium 6.7

    Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC ma…

  • Medium 6.5

    Information exposure through microarchitectural state after transient execution in certain vector execution units for s…

  • Medium 4.2

    Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an au…

  • Medium 4.4

    Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potent…

  • Medium 5.3

    Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potential…

  • Medium 4.1

    Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…

  • Medium 6.1

    Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

  • Medium 6.9

    Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  • Medium 6.7

    Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allo…

  • Medium 4.4

    Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between Octobe…

  • Medium 5.6

    Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an un…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and…

  • Medium 6.7

    Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated us…

  • Medium 4.3

    Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticat…

  • Medium 6.0

    Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user…

  • Medium 5.7

    Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potenti…

  • Medium 5.4

    ThinkCMF Cross-site Scripting Vulnerability

    Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via crafted user_login.

  • Medium 6.1

    Gila CMS Cross-site Scripting Vulnerability

    Cross Site Scripting (XSS) vulnerability in adm_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code during the Gila CMS installation.

  • Medium 6.5

    SUCHMOKUO node-worker-threads-pool denial of service Vulnerability

    An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a denial of service.

  • Medium 6.1

    Margox Braft-Editor Cross-site Scripting Vulnerability

    Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the embed media feature.