Skip to content
OpenAdvisories

Archive

August 2023

Vulnerabilities first published in this month (UTC), newest first.

2,514 results · Feed

  • Medium 4.4

    Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potent…

  • Low 3.3

    Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticat…

  • Medium 5.3

    Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potential…

  • Medium 4.1

    Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to p…

  • Medium 6.1

    Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

  • Medium 6.9

    Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially …

  • High 7.2

    Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially en…

  • Low 3.3

    Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of …

  • Medium 6.7

    Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allo…

  • Medium 4.4

    Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between Octobe…

  • Medium 5.6

    Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an un…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and…

  • High 7.2

    Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.4…

  • Medium 6.7

    Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated us…

  • Low 3.8

    Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated…

  • High 8.6

    Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94…

  • Medium 4.3

    Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticat…

  • High 8.2

    Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially…

  • High 7.9

    Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user…

  • Medium 6.0

    Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user…

  • High 8.2

    Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user…

  • Medium 5.7

    Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potenti…

  • Low 3.4

    Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviled…

  • Low 3.3

    HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcher

    When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.

  • Low 3.3

    HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher

    When the app is put to the background and the user goes to the task switcher of iOS, the app snapshot is not blurred which may reveal sensitive information.

  • Low 3.5

    HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web content

    If certain App Transport Security (ATS) settings are set in a certain manner, insecure loading of web content can be achieved.

  • Low 3.8

    Business Logic Errors in froxlor/froxlor

    Business Logic Errors in GitHub repository froxlor/froxlor prior to 2.0.22,2.1.0.

  • High 7.5

    FaucetSDN Ryu Denial of Service Vulnerability

    An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).

  • High 7.5

    FaucetSDN Ryu Denial of Service Vulnerability

    An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of service (DoS) (infinite loop).

  • Unscored —

    Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader ve…

  • Unscored —

    Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code a…

  • Unscored —

    CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted C…

  • Unscored —

    Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allow…

  • Unscored —

    Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arb…

  • Unscored —

    SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm_sendm…

  • Unscored —

    An issue was discovered in decode_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a …

  • Unscored —

    An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting par…

  • Unscored —

    An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (D…

  • Unscored —

    File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate…

  • Unscored —

    An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (D…