12,440 results · Clear filters · Feed
-
Low 3.3
Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may…
-
Low 1.9
Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service v…
-
Low 1.9
Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of serv…
-
Low 1.9
Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of serv…
-
Low 2.2
Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated us…
-
Low 2.2
Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalati…
-
Low 2.5
Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to pote…
-
Low 3.3
Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enab…
-
Low 3.3
Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information dis…
-
Low 3.3
Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable informatio…
-
Low 3.3
Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an…
-
Low 3.8
Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 …
-
Low 1.9
SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest…
-
Low 1.9
Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-…
-
Low 1.9
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the…
-
Low 3.3
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory con…
-
Low 2.5
Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP…
-
Low 2.1
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 a…
-
Low 3.7
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCO…
-
Low 2.7
Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web…
-
Low 3.5
A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks…
-
Low 2.9
Global Buffer Overflow leading to denial of service in PX4-Autopilot
PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exists in the CrsfParser_TryParseCrsfPacket function in /src/drivers/rc/crsf_rc/CrsfParser.cpp:298 due to the invalid size check. A malicious us…
-
Low 3.1
Denial of service from malicious image manifest in kyverno
Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerable component in Kyvernos Notary verifier. An attacker would need control over the registr…
-
Low 3.1
Denial of service from malicious image manifest in kyverno
Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerability was in Kyvernos Notary verifier. An attacker would need control over the registry f…
-
Low 2.4
Intelbras RX 1500 SSID WiFi.html cross site scripting
A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /WiFi.html of the component SSID Handler. The manipulation leads to cross site scripting. The attac…
-
Low 3.3
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Tel…
-
Low 3.4
Discourse SSRF vulnerability in Embedding
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, the embedding feature is susceptible to server side request forgery. The issue is p…
-
Low 3.5
PHPGurukul Restaurant Table Booking System Reservation Request index.php cross site scripting
A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.php of the component Reservation Request Handler. The manipulation leads to cross site scripting. It …
-
Low 3.3
Unread bookmark reminder notifications that the user cannot access can be seen
Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-passed` branches, there is an edge case where a bookmark reminder is sent and an unread notification …
-
Low 3.3
Moodle: duplicating a bigbluebutton activity assigns the same meeting id
When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the new activity. This could provide unintended access to the original meeting.
-
Low 3.3
Moodle: forum summary report shows students from other groups when in separate groups mode
Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other groups.
-
Low 3.3
Moodle: insufficient capability checks when updating the parent of a course category
Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a parent category they did not have the capability to manage.
-
Low 3.3
Moodle: cache poisoning risk with endpoint revision numbers
Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.
-
Low 3.3
Moodle: xss risk when previewing data in course upload tool
The course upload preview contained an XSS risk for users uploading unsafe data.
-
Low 3.3
Moodle: auto-populated h5p author name causes a potential information leak
H5P metadata automatically populated the author with the user's username, which could be sensitive information.
-
Low 3.3
Moodle: students can view other users in "only see own membership" groups
Students in "Only see own membership" groups could see other students in the group, which should be hidden.
-
Low 3.3
Moodle: xss risk when using csv grade import method
The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.
-
Low 3.3
A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BG…
-
Low 2.4
A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Tel…
-
Low 3.9
The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execu…