106,821 results · Clear filters · Feed
-
Medium 6.9
Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a…
-
Medium 5.8
Integer underflow (wrap or wraparound) for the Intel(R) NPU Driver software before version 1.33.0 within Ring 3: User A…
-
Medium 5.4
Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applicat…
-
Medium 5.6
Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User Applicati…
-
Medium 5.9
Out-of-bounds write for some Intel(R) Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow a denial…
-
Medium 6.9
Out-of-bounds read for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers m…
-
Medium 5.4
Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an es…
-
Medium 4.8
Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R) P…
-
Medium 6.9
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers …
-
Medium 6.8
Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a denial of se…
-
Medium 6.8
Improper input validation for some Intel(R) CIP software within Ring 2: Privileged Process may allow a denial of servic…
-
Medium 6.8
Null pointer dereference for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may al…
-
Medium 6.8
Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Dr…
-
Medium 6.9
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers …
-
Medium 6.3
Incorrect default permissions for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow a…
-
Medium 5.4
Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications m…
-
Medium 6.8
Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service.…
-
Medium 5.4
Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications ma…
-
Medium 5.4
Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may all…
-
Medium 5.4
Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications ma…
-
Medium 6.8
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Heap-based Buffer Overflow” by local …
-
Medium 6.8
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access.…
-
Medium 4.8
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. …
-
Medium 4.6
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Out-of-Bound Read” by local access. …
-
Medium 4.9
Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker…
-
Medium 4.5
Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350
An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compr…
-
Medium 5.5
An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authentic…
-
Medium 4.9
Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attac…
-
Medium 4.9
Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticate…
-
Medium 6.7
Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticate…
-
Medium 5.5
A path traversal vulnerability in Ivanti Sentry before versions 11.0, 10.8.3, and 10.7.4 allows a remote authenticated …
-
Medium 5.5
An insecure default initialization of resource in the Tomcat shutdown listener of Ivanti Sentry before versions 11.0, 1…
-
Medium 6.7
Argument injection in Ivanti Sentry before version 11.0, 10.8.3, and 10.7.4 allows a remote authenticated attacker with…
-
Medium 5.9
Information exposure in Flock Safety Platform public access-list sign-up
An information exposure flaw in the public access-list sign-up feature of the Flock Safety Platform, present from 2026-06-23 to 2026-10-22, allowed a remote, unauthenticated attacker who had a community's public sign-up link and a registered vehicle's license…
-
Medium 6.8
Cleartext transmission of sensitive information in the Agent of Ivanti Endpoint Manager before version 2024 SU8 allows …
-
Medium 4.3
A out-of-bounds read vulnerability exists in the dr_mp3 drmp3_init_internal functionality of dr_libs (version(s): 0.7.3…
-
Medium 6.3
Cleartext storage of sensitive information in Ivanti UWM before version 2026.4 allows a local authenticated attacker to…
-
Medium 5.9
postal-mime before 4.2.1 Sender Spoofing via Address Parser Domain Truncation
postal-mime before 4.2.1 contains a parser differential vulnerability in its address parser that truncates the domain at folding whitespace or comments preceding a dot. Remote attackers can craft From headers that pass SPF/DKIM/DMARC alignment for their own s…
-
Medium 5.9CVE-2026-125753 Public exploit
ABP Framework before 10.6.2 and 10.7.0 Path Traversal via Blogging File Endpoints
ABP Framework 2.9.0 before 10.6.2 and 10.7.0 pre-releases before 10.7.0 contain a path traversal vulnerability in DefaultBlobFilePathCalculator that allows unauthenticated attackers to access files outside the blob container. Attackers can send %5C-encoded ba…
-
Medium 5.0
Meteroid before 2.2.0 Cross-Tenant Authorization Bypass via UpdateCouponStatus
Meteroid before 2.2.0 contains a cross-tenant authorization bypass vulnerability in the CouponsService UpdateCouponStatus gRPC handler, whose UPDATE query filters only on coupon id and ignores tenant ID. Authenticated users with catalog:manage or a tenant-sco…