Archive
16 May 2024
Vulnerabilities first published on this day (UTC), newest first.
78 results · Clear filters · Feed
-
High 7.8
Azure Monitor Agent Elevation of Privilege Vulnerability
Azure Monitor Agent Elevation of Privilege Vulnerability
-
High 7.2
Improper neutralization in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware…
-
High 7.2
Uncaught exception in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may …
-
High 7.2
Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware…
-
High 7.2
Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…
-
High 7.2
Insufficient control flow management in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageabi…
-
High 8.4
Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware…
-
High 8.6
Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…
-
High 7.2
Improper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escala…
-
High 7.2
Improper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escala…
-
High 7.3
Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user …
-
High 7.8
Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated…
-
High 8.2
Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated…
-
High 7.8
Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authentic…
-
High 7.0
Improper access control for some Intel(R) Thunderbolt driver software before version 89 may allow an authenticated user…
-
High 7.9
Exposure of resource to wrong sphere in some Intel(R) DTT software installers may allow an authenticated user to potent…
-
High 7.6
Unchecked return value in SDM firmware for Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs before version 23.3 may allo…
-
High 7.9
Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user…
-
High 7.9
Use after free in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentiall…
-
High 8.8
Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to p…
-
High 8.8
Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potential…
-
High 8.8
Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to pot…
-
High 8.8
Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to p…
-
High 8.8
Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user t…
-
High 8.2
Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may all…
-
High 7.8
Improper neutralization in some Intel(R) Arc(TM) & Iris(R) Xe Graphics software before version 31.0.101.5081 may allow …
-
High 7.2
Improper input validation in PlatformVariableInitDxe driver in UEFI firmware for some Intel(R) Server D50DNP Family pro…
-
High 7.5
Improper input validation in PfrSmiUpdateFw driver in UEFI firmware for some Intel(R) Server M50FCP Family products may…
-
High 7.5
Improper buffer restrictions in PlatformPfrDxe driver in UEFI firmware for some Intel(R) Server D50FCP Family products …
-
High 7.5
Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some Intel(R) Server D50DNP Family produ…
-
High 7.5
Improper input validation in PprRequestLog module in UEFI firmware for some Intel(R) Server D50DNP Family products may …
-
High 7.5
Hardware logic with insecure de-synchronization in Intel(R) DSA and Intel(R) IAA for some Intel(R) 4th or 5th generatio…
-
High 7.5
ShiftController Employee Shift Scheduling <= 4.9.57 - Authenticated (Contributor+) PHP Object Injection
The ShiftController Employee Shift Scheduling plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the `hc3_session`-cookie in versions up to, and including, 4.9.57. This makes it possible for an authenticated attacker with …
-
High 7.8
Local Code Injection Vulnerability in AuthPoint Password Manager App for macOS Safari
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager app…
-
High 7.5
A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trig…
-
High 8.4
IBM AIX command execution
IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands. IBM X-Force ID: 283985.
-
High 7.5
Nexus Repository 3 - Path Traversal
Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.
-
High 7.0CVE-2024-3640 Public exploit
Rockwell Automation FactoryTalk® Remote Access™ has Unquoted Executables
An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threa…
-
High 8.8
Rockwell Automation Datalog Function within in FactoryTalk® View SE contains SQL Injection Vulnerability
A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploit…
-
High 7.5
FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerabi…