Archive
13 November 2024
Vulnerabilities first published on this day (UTC), newest first.
230 results · Feed
-
Medium 4.3
Improper input validation for some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.60 may allow an…
-
Medium 6.7
Incorrect default permissions in some Intel(R) Distribution for Python software before version 2024.2 may allow an auth…
-
Low 3.9
Out-of-bounds read for some OpenCL(TM) software may allow an authenticated user to potentially enable denial of service…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Graphics Offline Compiler for OpenCL(TM) Code software for Windows before ver…
-
Medium 6.8
Improper access control for some Intel(R) Arc(TM) Pro Graphics for Windows drivers before version 31.0.101.5319 may all…
-
Medium 6.7
Uncontrolled search path element in some Intel(R) MAS software before version 2.5 may allow an authenticated user to po…
-
Medium 6.5
Improper input validation in the Intel(R) Distribution of OpenVINO(TM) Model Server software before version 2024.0 may …
-
Medium 6.7
Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may al…
-
Low 3.9
Improper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an authenticated user to p…
-
Medium 6.8
Insufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may allow an authenticate…
-
Medium 6.7
Improper access control in some JAM STAPL Player software before version 2.6.1 may allow an authenticated user to poten…
-
Medium 6.7
Uncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R) Quartus(R) Prime Pro Edit…
-
Medium 5.4
Cleartext transmission of sensitive information for some BigDL software maintained by Intel(R) before version 2.5.0 may…
-
Medium 5.5
Improper access control for some BigDL software maintained by Intel(R) before version 2.5.0 may allow an authenticated …
-
Medium 4.4
Improper access control in some Intel(R) Granulate(TM) software before version 4.30.1 may allow a authenticated user to…
-
Medium 6.7
Uncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may allow an authenticated…
-
Medium 6.7
Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated…
-
Medium 6.7
Uncontrolled search path for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may allo…
-
Medium 6.7
Incorrect default permissions for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may…
-
Medium 6.6
Improper buffer restrictions in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable de…
-
High 8.4
Untrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable e…
-
Medium 5.3
Improper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user to potentially enable e…
-
High 8.4
Out-of-bounds write in some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation …
-
Low 2.2
NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potenti…
-
Medium 5.0
An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintex…
-
Low 2.2
Out-of-bounds read in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially e…
-
Medium 4.2
Improper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to pot…
-
Medium 4.8
Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially en…
-
High 7.2
Exposure of resource to wrong sphere in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to pote…
-
High 7.2
Time-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to …
-
Low 3.4
Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before ver…
-
Medium 4.7
Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors …
-
High 8.8
Script security bypass vulnerability in Jenkins Shared Library Version Override Plugin
Jenkins Shared Library Version Override Plugin 17.v786074c9fce7 and earlier declares folder-scoped library overrides as trusted, so that they're not executed in the Script Security sandbox, allowing attackers with Item/Configure permission on a folder to conf…
-
High 8.0
Stored XSS vulnerability in Jenkins Authorize Project Plugin
Jenkins Authorize Project Plugin 1.7.2 and earlier evaluates a string containing the job name with JavaScript on the Authorization view, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
-
High 8.8
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
Jenkins OpenId Connect Authentication Plugin 4.418.vccc7061f5b_6d and earlier does not invalidate the previous session on login.
-
High 8.0
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Jenkins Pipeline: Declarative Plugin 2.2214.vb_b_34b_2ea_9b_83 and earlier does not check whether the main (Jenkinsfile) script used to restart a build from a specific stage is approved, allowing attackers with Item/Build permission to restart a previous buil…
-
Medium 4.3
Missing permission check in Jenkins Script Security Plugin
Jenkins Script Security Plugin 1367.vdf2fc45f229c and earlier, except 1365.1367.va_3b_b_89f8a_95b_ and 1362.1364.v4cf2dc5d8776, does not perform a permission check in a method implementing form validation, allowing attackers with Overall/Read permission to ch…
-
High 8.0CVE-2024-52550 Public exploit
Rebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin
Jenkins Pipeline: Groovy Plugin 3990.vd281dd77a_388 and earlier, except 3975.3977.v478dd9e956c3 does not check whether the main (Jenkinsfile) script for a rebuilt build is approved, allowing attackers with Item/Build permission to rebuild a previous build who…
-
Medium 5.7
Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless…
-
Medium 6.5
Improper input validation for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.40 may allow a…