Archive
May 2024
Vulnerabilities first published in this month (UTC), newest first.
2,009 results · Clear filters · Feed
-
Medium 6.7
Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.0 may allow an authen…
-
Medium 6.7
Uncontrolled search path for some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenti…
-
Medium 6.7
Uncontrolled search path in some Intel(R) PCM software before version 202311 may allow an authenticated user to potenti…
-
Medium 6.0
Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user…
-
Medium 5.0
NULL pointer dereference in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to …
-
Medium 5.5
Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user…
-
Medium 5.5
Incomplete cleanup in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentia…
-
Medium 6.7
Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated us…
-
Medium 4.3
Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unaut…
-
Medium 4.3
Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthentic…
-
Medium 4.4
Improper conditions check for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.20 may allow a…
-
Medium 4.7
Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 may allow an u…
-
Medium 5.5
Improper access control for some Intel(R) Wireless Bluetooth products for Windows before version 23.20 may allow an aut…
-
Medium 6.0
Improper conditions check in the Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow an privileged use…
-
Medium 6.7
Uncontrolled search path for some Intel(R) Distribution for GDB software before version 2024.0 may allow an authenticat…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Inspector software before version 2024.0 may allow an authenticated user to p…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to pot…
-
Medium 4.4
Improper input validation in firmware for some Intel(R) FPGA products before version 2.9.1 may allow denial of service.
-
Medium 5.7
Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege …
-
Medium 4.7
Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an auth…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Quartus(R) Prime Standard Edition Design software before version 23.1 may all…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow a…
-
Medium 6.7
Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow…
-
Medium 6.7
Improper access control in some Intel(R) Ethernet Controller Administrative Tools software before version 28.3 may allo…
-
Medium 6.7
Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user t…
-
Medium 6.7
Uncontrolled search path for some Intel(R) Computing Improvement Program software before version 2.4.0.10654 may allow …
-
Medium 6.7
Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.4 may allow an authenticated user …
-
Medium 6.7
Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potenti…
-
Medium 5.8
Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some Intel(R) Server Board S2600BP products may allo…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Processor Diagnostic Tool software before version 4.1.9.41 may allow an authe…
-
Medium 4.7
Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authe…
-
Medium 4.3
ReviewX – Multi-criteria Rating & Reviews for WooCommerce <= 1.6.27 - Missing Authorization
The ReviewX – Multi-criteria Rating & Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized deletion of data due to a missing capability check on the reviewx_remove_guest_image function in all versions up to, and including, 1.6.27. This m…
-
Medium 5.0
Elementor Header & Footer Builder <= 1.6.26 - Authenticated (Author+) HTML Injection
The Elementor Header & Footer Builder for WordPress is vulnerable to HTML Injection in all versions up to, and including, 1.6.26 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with author-level …
-
Medium 4.3
Bulk Posts Editing For WordPress <= 4.2.3 - Cross-Site Request Forgery
The Bulk Posts Editing For WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.3. This is due to missing or incorrect nonce validation on the plugin's AJAX actions.. This makes it possible for u…
-
Medium 4.9
Sunshine's unquoted executable path could lead to hijacked execution flow
Sunshine is a self-hosted game stream host for Moonlight. Users who ran Sunshine versions 0.17.0 through 0.22.2 as a service on Windows may be impacted when terminating the service if an attacked placed a file named `C:\Program.exe`, `C:\Program.bat`, or `C:\…
-
Medium 4.4
IBM Security Guardium denial of service
IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690.
-
Medium 5.9
WordPress Magazine Blocks plugin <= 1.3.6 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPBlockart Magazine Blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through 1.3.6.
-
Medium 6.5
WordPress iframe plugin <= 5.0 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webvitaly iFrame allows Stored XSS.This issue affects iFrame: from n/a through 5.0.