Archive
14 November 2023
Vulnerabilities first published on this day (UTC), newest first.
29 results · Clear filters · Feed
-
Low 3.5
Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information dis…
-
Low 3.7
Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network acces…
-
Low 3.1
Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a den…
-
Low 3.4
Inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttp
aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-Lengt…
-
Low 3.7
Information Disclosure in Install Tool in typo3/cms-install
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install tool discloses the full path of the transient data directory (e.g. /var/www/html/var/transient/). This …
-
Low 2.3
Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user t…
-
Low 2.6
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentia…
-
Low 3.9
Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated use…
-
Low 3.3
Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may…
-
Low 1.9
Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service v…
-
Low 1.9
Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of serv…
-
Low 1.9
Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of serv…
-
Low 2.2
Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated us…
-
Low 2.2
Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalati…
-
Low 2.5
Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to pote…
-
Low 3.3
Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enab…
-
Low 3.3
Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information dis…
-
Low 3.3
Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable informatio…
-
Low 3.3
Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an…
-
Low 3.8
Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 …
-
Low 1.9
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest…
-
Low 1.9
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-…
-
Low 1.9
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the…
-
Low 3.3
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory con…
-
Low 2.5
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP…
-
Low 2.1
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 a…
-
Low 3.7
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…
-
Low 2.7
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web…
-
Low 3.5
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks…