Archive
August 2025
Vulnerabilities first published in this month (UTC), newest first.
1,498 results · Clear filters · Feed
-
Medium 6.7
Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated us…
-
Medium 5.5
Improper input validation for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platfo…
-
Medium 5.7
Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edg…
-
Medium 6.7
Incorrect default permissions for some Intel(R) Distribution for Python software installers before version 2025.1.0 may…
-
Medium 6.7
Uncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an authenticated user to pot…
-
Medium 6.7
Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authen…
-
Medium 6.6
Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform…
-
Medium 5.8
Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform…
-
Medium 6.5
Protection mechanism failure in the Intel(R) Graphics Driver for the Intel(R) Arc(TM) B-Series graphics before version …
-
Medium 6.5
NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denia…
-
Medium 6.5
Improper access control in some firmware package and LED mode toggle tool for some Intel(R) PCIe Switch software before…
-
Medium 4.4
Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may a…
-
Medium 6.7
Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticat…
-
Medium 6.0
Improper input validation in some firmware for the Intel(R) E810 Ethernet before version 4.6 may allow a privileged use…
-
Medium 6.7
Uncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow …
-
Medium 4.4
Out-of-bounds read in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to…
-
Medium 6.7
Uncontrolled search path element for some Intel(R) Driver & Support Assistant Tool software before version 24.6.49.…
-
Medium 6.5
Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to …
-
Medium 6.7
Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an auth…
-
Medium 6.7
Improper access control for some Intel(R) Rapid Storage Technology installation software may allow an authenticated use…
-
Medium 6.7
Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to po…
-
Medium 5.5
Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authe…
-
Medium 6.7
Incorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may allow an authenticate…
-
Medium 5.3
Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some Intel(R) referen…
-
Medium 6.0
Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may allow a privileged user to potent…
-
Medium 6.7
Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated …
-
Medium 4.4
Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticat…
-
Medium 6.7
Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to …
-
Medium 6.7
Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated …
-
Medium 5.1
svg-sanitizer By-Passing Attribute Sanitization
savg-sanitizer is a PHP SVG/XML sanitizer. Prior to version 0.22.0, the sanitization logic in the cleanXlinkHrefs method only searches for lower-case attribute name, which allows to by-pass the isHrefSafeValue check. As a result this allows cross-site scripti…
-
Medium 5.3
Broken Access Control in ServiceNow AI Platform
ServiceNow has addressed a Broken Access Control vulnerability that was identified in the ServiceNow AI Platform. This vulnerability could allow a low privileged user to bypass access controls and perform a limited set of actions typically reserved for higher…
-
Medium 6.4
Kanboard Path Traversal in File Write via Task File Upload Api
Kanboard is project management software that focuses on the Kanban methodology. Prior to version 1.2.47, the createTaskFile method in the API does not validate whether the task_id parameter is a valid task id, nor does it check for path traversal. As a result…
-
Medium 6.9
Hydra missing authentication when triggering evaluations through GitHub and Gitea plugins
Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/push-gitea are called by the corresponding forge without HTTP Basic authentication. Both forges do however feature HMAC signing with a secret …
-
Medium 4.3
Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.
By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial number can, in turn, can be leveraged by the flaw described by CV…
-
Medium 5.5
Improper handling of symbolic links in Ivanti Connect Secure before version 22.7R2.8 or 22.8R2, Ivanti Policy Secure be…
-
Medium 4.9
XEE in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, Ivanti ZTA Gateway before…
-
Medium 6.5
Missing authorization in the admin console of Ivanti Virtual Application Delivery Controller before version 22.9 allows…
-
Medium 6.3
iSCSI Remote Memory Corruption and Denial of Service
EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service.
-
Medium 4.2
ThirdPartyVideo SetVariable Vulnerability
AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and…
-
Medium 6.9
Liferay Portal and Liferay DXP have a reflected cross-site scripting vulnerability
A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12 and 7.4 GA through update…