Skip to content
OpenAdvisories

Archive

16 May 2024

Vulnerabilities first published on this day (UTC), newest first.

121 results · Clear filters · Feed

  • Medium 6.4

    Master Addons for Elementor <= 2.0.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Master Addons – Free Widgets, Hover Effects, Toggle, Conditions, Animations for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the title_html_tag attribute in all versions up to, and including, 2.0.6.0 due to insufficient …

  • Medium 5.3

    Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…

  • Medium 6.0

    Improper input validation in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmwa…

  • Medium 6.1

    Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalat…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user …

  • Medium 6.7

    Uncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an authenticated user to potenti…

  • Medium 5.9

    Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially en…

  • Medium 4.8

    Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable e…

  • Medium 6.7

    Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driv…

  • Medium 6.7

    Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an a…

  • Medium 6.7

    Incorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards base…

  • Medium 6.5

    Improper input validation for some Intel(R) DLB driver software before version 8.5.0 may allow an authenticated user to…

  • Medium 6.7

    Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated…

  • Medium 4.4

    Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to pot…

  • Medium 4.4

    Improper access control for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to pote…

  • Medium 6.7

    Uncontrolled search path for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to pot…

  • Medium 4.7

    Improper access control in some Intel(R) CST before version 2.1.10300 may allow an authenticated user to potentially en…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticate…

  • Medium 6.7

    Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.0 may allow an authen…

  • Medium 6.7

    Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenti…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potenti…

  • Medium 6.0

    Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user…

  • Medium 5.0

    NULL pointer dereference in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to …

  • Medium 5.5

    Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user…

  • Medium 5.5

    Incomplete cleanup in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentia…

  • Medium 6.7

    Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated us…

  • Medium 4.3

    Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unaut…

  • Medium 4.3

    Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthentic…

  • Medium 4.4

    Improper conditions check for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.20 may allow a…

  • Medium 4.7

    Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 may allow an u…

  • Medium 5.5

    Improper access control for some Intel(R) Wireless Bluetooth products for Windows before version 23.20 may allow an aut…

  • Medium 6.0

    Improper conditions check in the Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow an privileged use…

  • Medium 6.7

    Uncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0 may allow an authenticat…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) Inspector software before version 2024.0 may allow an authenticated user to p…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to pot…

  • Medium 4.4

    Improper input validation in firmware for some Intel(R) FPGA products before version 2.9.1 may allow denial of service.

  • Medium 5.7

    Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege …

  • Medium 4.7

    Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an auth…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6…

  • Medium 6.7

    Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an…