Archive
13 November 2024
Vulnerabilities first published on this day (UTC), newest first.
90 results · Clear filters · Feed
-
High 7.0
Improper neutralization of special elements used in SQL command in some Intel(R) Neural Compressor software before vers…
-
High 7.5
Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an unauthenticated …
-
High 8.0
Improper neutralization of special elements used in an SQL command ('SQL Injection') in some Intel(R) Neural Compressor…
-
High 8.2
Improper access control for some Intel(R) EMA software before version 1.13.1.0 may allow an authenticated user to poten…
-
High 7.3
Improper Access Control in some Intel(R) DSA before version 24.3.26.8 may allow an authenticated user to potentially en…
-
High 8.8
Protection mechanism failure in the SPP for some Intel(R) Processors may allow an authenticated user to potentially ena…
-
High 7.1
Path traversal for some Intel(R) Extension for Transformers software before version 1.5 may allow an authenticated user…
-
High 8.2
Improper input validation in the Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions ma…
-
High 8.2
Improper input validation in some Intel(R) CIP software before version 2.4.10852 may allow a privileged user to potenti…
-
High 7.5
Improper Access Control in UEFI firmware for some Intel(R) Server Board M70KLP may allow a privileged user to potential…
-
High 7.5
Use after free in the UEFI firmware of some Intel(R) Server M20NTP BIOS may allow a privileged user to potentially enab…
-
High 7.5
Improper input validation in UEFI firmware in some Intel(R) Server Board M10JNP2SB Family may allow a privileged user t…
-
High 7.5
Improper input validation in UEFI firmware for some Intel(R) Server S2600BPBR may allow a privileged user to potentiall…
-
High 7.5
Improper input validation in UEFI firmware in some Intel(R) Server Board S2600BP Family may allow a privileged user to …
-
High 8.4
Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable e…
-
High 8.4
Out-of-bounds write in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation …
-
High 7.2
Exposure of resource to wrong sphere in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to pote…
-
High 7.2
Time-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to …
-
High 8.8
Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin
Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to conf…
-
High 8.0
Stored XSS vulnerability in Jenkins Authorize Project Plugin
Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
-
High 8.8
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login.
-
High 8.0
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous buil…
-
High 8.0CVE-2024-52550 Public exploit
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build who…
-
High 7.2
Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) S…
-
High 8.8
Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX m…
-
High 7.3
In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to pre…
KEV Nov 7, 2024 -
High 8.4
In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to a…
-
High 7.8
In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission…
-
High 7.8
In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlock…
-
High 8.4
In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled acces…
-
High 7.8
In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a m…
-
High 7.8
In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a l…
-
High 7.8
In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone du…
-
High 7.8
In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization…
-
High 7.8
In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a l…
-
High 7.8
In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. Thi…
-
High 7.8
In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in th…
-
High 8.4
In multiple locations, there is a possible permissions bypass due to a missing null check. This could lead to local esc…
-
High 8.4
In multiple locations, there is a possible arbitrary code execution due to a logic error in the code. This could lead t…
-
High 8.4
In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This …