Archive
11 November 2025
Vulnerabilities first published on this day (UTC), newest first.
165 results · Clear filters · Feed
-
Medium 6.7
Uncontrolled search path for some Intel Driver and Support Assistant before version 25.2 within Ring 3: User Applicatio…
-
Medium 6.7
Uncontrolled search path for some Intel(R) Distribution for Python software installers before version 2025.2.0 within R…
-
Medium 4.4
Time-of-check time-of-use race condition for some ACAT before version 3.13 within Ring 3: User Applications may allow a…
-
Medium 5.7
Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within Ring 3: User Applicatio…
-
Medium 6.7
Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 wi…
-
Medium 6.5
Untrusted pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applicat…
-
Medium 5.5
Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may al…
-
Medium 6.7
Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: Us…
-
Medium 5.5
Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications …
-
Medium 5.9
Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications m…
-
Medium 6.5
Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of servi…
-
Medium 6.7
Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within …
-
Medium 6.7
Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software …
-
Medium 6.5
Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User App…
-
Medium 6.3
Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Appl…
-
Medium 4.5
Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applica…
-
Medium 6.7
Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications …
-
Medium 6.5
Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Appl…
-
Medium 6.5
Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow…
-
Medium 4.5
Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicati…
-
Medium 5.6
Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring…
-
Medium 6.7
Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.14…
-
Medium 6.7
Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application before version 20.0.1021 within R…
-
Medium 6.7
Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation…
-
Medium 6.7
External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: …
-
Medium 6.7
Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Dev…
-
Medium 4.4
Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allo…
-
Medium 6.7
Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicat…
-
Medium 5.3
NVIDIA AIStore contains a vulnerability in AuthN where an unauthenticated user may cause information disclosure. A suc…
-
Medium 6.5
NVIDIA Triton Inference Server for Linux and Windows contains a vulnerability where an attacker could cause a stack ove…
-
Medium 6.8
Improper input validation in NETGEAR DGN2200v4
Improper input validation in NETGEAR DGN2200v4 (N300 Wireless ADSL2+ Modem Router) allows attackers with direct network access to the device to potentially execute code on the device. Please check the firmware version and update to the latest. Fixed in: DGN2…
-
Medium 5.2
Improper certificate validation in firmware update logic in NETGEAR RAX30 and RAXE300
Improper certificate validation in firmware update logic in NETGEAR RAX30 (Nighthawk AX5 5-Stream AX2400 WiFi 6 Router) and RAXE300 (Nighthawk AXE7800 Tri-Band WiFi 6E Router) allows attackers with the ability to intercept and tamper traffic destined to the d…
-
Medium 4.8
Improper input validation in NETGEAR R6260 and R6850
Improper Input Validation vulnerability in NETGEAR R6260 and NETGEAR R6850 allows unauthenticated attackers connected to LAN with ability to perform MiTM attacks and control over DNS Server to perform command execution.This issue affects R6260: through 1.1.0.…
-
Medium 4.4
Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection
Collision in MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms.
-
Medium 6.1
Mitigation bypass in the DOM: Core & HTML component
Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Firefox ESR 115.30, Thunderbird 145, and Thunderbird 140.5.
-
Medium 5.9
Cross-Site Scripting (XSS)
Cross-Site Scripting (XSS) in NetScaler ADC and NetScaler Gateway when the appliance is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
-
Medium 6.5
Stored XSS
Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap processor.
-
Medium 5.1
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'first_name' in '/clients/save_contact/'.
-
Medium 5.1
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'.
-
Medium 5.1
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'custom_field_1' in '/estimate_requests/save_estimate_…