Archive
11 November 2025
Vulnerabilities first published on this day (UTC), newest first.
16 results · Clear filters · Feed
-
Low 2.1
Incorrect oauth passthrough in Grafana Databricks Datasource
When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, …
-
Low 2.1
Incorrect oauth passthrough in Grafana Snowflake Datasource
When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, a…
-
Low 3.3
Improper conditions check for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications…
-
Low 2.0
Improper access control for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow a …
-
Low 3.3
Improper input validation for some Intel(R) oneAPI Math Kernel Library before version 2025.2 within Ring 3: User Applic…
-
Low 3.8
Improper input validation for some Intel QuickAssist Technology software before version 2.6.0 within Ring 3: User Appli…
-
Low 3.3
Improper input validation in some firmware for some Intel(R) Graphics Drivers and Intel LTS kernels within Ring 1: Devi…
-
Low 2.0
Unrestricted upload of file with dangerous type for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 withi…
-
Low 2.0
Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicati…
-
Low 2.0
Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User App…
-
Low 3.8
Sensitive information uncleared in resource before release for reuse for some Intel(R) NPU Drivers for Windows before v…
-
Low 0.5
Credentials recorded in logs in NETGEAR WAX610 and WAX610Y
Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1800 Dual Band PoE Multi-Gig Insight Managed WiFi 6 Access Points). An user having access to the syslog server can read the logs containing …
-
Low 3.4
Spoofing issue in Firefox
Spoofing issue in Firefox. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, and Firefox ESR 115.30.
-
Low 2.7
In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit
-
Low 3.1
It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and …
-
Low 2.7
Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench)
Migration Workbench (DX Workbench) in SAP NetWeaver Application Server for ABAP fails to trigger a malware scan when an attacker with administrative privileges uploads files to the application server. An attacker could leverage this and upload a malicious fil…