Skip to content
OpenAdvisories

Archive

13 May 2025

Vulnerabilities first published on this day (UTC), newest first.

312 results · Feed

  • Medium 5.5

    Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allo…

  • Medium 4.7

    Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge…

  • Medium 6.7

    Uncontrolled search path element for some Intel(R) Network Adapter Driver installers for Windows 11 before version 29.4…

  • High 7.3

    Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an…

  • Medium 6.5

    Insufficient resource pool in the core management mechanism for some Intel(R) Processors may allow an authenticated use…

  • High 8.4

    Out-of-bounds read for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable information…

  • High 7.5

    Improper access control in the memory controller configurations for some Intel(R) Xeon(R) 6 processor with E-cores may …

  • Medium 6.7

    Incorrect Default Permissions for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticate…

  • Low 3.5

    Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an au…

  • High 7.5

    Improper authentication in the firmware for the Intel(R) Slim Bootloader may allow a privileged user to potentially ena…

  • High 7.5

    Time-of-check time-of-use race condition in the UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50…

  • Medium 6.7

    Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escal…

  • Medium 5.0

    Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthentica…

  • Medium 6.5

    NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denia…

  • Medium 6.1

    Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthent…

  • Low 3.5

    Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an au…

  • Medium 6.5

    Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to pot…

  • High 7.3

    Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denia…

  • Medium 5.7

    Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors …

  • High 8.0

    Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthent…

  • Medium 6.7

    Uncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated use…

  • Medium 6.7

    Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphic…

  • Medium 6.6

    Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthent…

  • Medium 5.3

    Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M…

  • High 7.9

    Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a…

  • Medium 6.5

    Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable deni…

  • Low 2.6

    Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge…

  • Medium 6.1

    Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unaut…

  • Medium 5.7

    Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a …

  • High 8.4

    Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable …

  • Medium 6.7

    Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authen…

  • Medium 5.5

    Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge…

  • Medium 4.9

    Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enab…

  • Medium 4.1

    Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards …

  • High 7.7

    Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow a p…

  • High 7.4

    Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthent…

  • High 7.2

    Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores…

  • High 8.2

    Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers ma…

  • High 8.4
    CVE-2025-43565 EPSS 18%

    ColdFusion | Incorrect Authorization (CWE-863)

    ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Incorrect Authorization vulnerability that could lead to arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability to b…

  • Critical 9.1

    ColdFusion | Improper Input Validation (CWE-20)

    ColdFusion versions 2025.1, 2023.13, 2021.19 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. A high-privileged attacker could leverage this vulnerability …