Archive
14 February 2024
Vulnerabilities first published on this day (UTC), newest first.
170 results · Feed
-
Medium 5.5
F5OS QKView utility vulnerability
A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
-
Medium 6.0
BIG-IP Appliance mode iAppsLX vulnerability
When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system. Note: Software versions which have reached End of Technical Support (E…
-
Medium 6.7
BIG-IP and BIG-IQ secure copy vulnerability
BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to Advanced shell (bash) can execute arbitrary commands with a specially crafted command string. This vulnerability is du…
-
High 7.2
BIG-IP iControl REST API Vulnerability
When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
-
Medium 5.0
SSRF in CSV Datasource Plugin
Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing CSV data from a remote endpoint configured by an administrator. If this pl…
-
High 8.0
Improper Path Sanitization in JSON Datasource Plugin
The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maintained plugin for Grafana that allows for retrieving and processing JSON data from a remote endpoint (including a specific sub-path) configu…
-
Medium 5.3
IBM Jazz for Service Management information disclosure
IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access controls. IBM X-Force ID: 269929.
-
Low 3.8
Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authent…
-
Medium 6.7
Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user t…
-
Medium 6.7
Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user …
-
Medium 6.7
Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user…
-
Medium 6.7
Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged u…
-
Medium 4.9
Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privi…
-
Medium 6.5
Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authen…
-
High 7.1
Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to pot…
-
Medium 6.7
Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated u…
-
Medium 6.7
Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potent…
-
Medium 6.7
Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may …
-
Medium 6.7
Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to p…
-
High 7.8
Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Tool…
-
Medium 6.0
Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits befor…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authe…
-
Medium 6.6
Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user…
-
Medium 6.7
Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated use…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenti…
-
Medium 5.5
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potenti…
-
Medium 6.3
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially…
-
High 8.8
Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potenti…
-
Medium 5.0
Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially…
-
Low 1.8
Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escal…
-
Medium 6.7
Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to pote…
-
Medium 6.7
Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of pri…
-
Medium 5.0
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allo…
-
Medium 6.7
Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may all…
-
Medium 5.5
Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to poten…
-
Medium 6.7
Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to pote…
-
Medium 6.8
Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to poten…
-
High 7.5
Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially e…
-
Medium 6.7
Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentiall…
-
Medium 6.7
Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user …