405,382 results · Feed
-
Medium 5.7
Improper input validation for some Intel(R) TDX Workload Attestation software within Ring 3: User Applications may allo…
-
Medium 6.9
Use after free for some Intel(R) QuickAssist Technology Driver for Windows within Ring 3: User Applications may allow a…
-
Medium 5.8
Integer underflow (wrap or wraparound) for the Intel(R) NPU Driver software before version 1.33.0 within Ring 3: User A…
-
Medium 5.4
Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applicat…
-
Medium 5.6
Improper input validation for some Media Transcode Accelerator before version 1.0.0-00128 within Ring 3: User Applicati…
-
Medium 5.9
Out-of-bounds write for some Intel(R) Multi-Buffer Crypto for IPSec within Ring 3: User Applications may allow a denial…
-
Low 2.0
Missing authentication for critical function for some AI Playground software before version v3.1.1-beta within Ring 3: …
-
High 8.5
Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ri…
-
Medium 6.9
Out-of-bounds read for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers m…
-
Medium 5.4
Improper input validation for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow an es…
-
Medium 4.8
Exposure of sensitive information to an unauthorized actor for some Intel(R) Platform Monitoring Technology (Intel(R) P…
-
Medium 6.9
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers …
-
Medium 6.8
Improper input validation for some Intel(R) Graphics Software within Ring 3: User Applications may allow a denial of se…
-
Medium 6.8
Improper input validation for some Intel(R) CIP software within Ring 2: Privileged Process may allow a denial of servic…
-
Medium 6.8
Null pointer dereference for the Intel(R) NPU Drivers before version 32.0.100.4778 within Ring 1: Device Drivers may al…
-
High 8.5
Time-of-check time-of-use race condition for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may…
-
High 8.5
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software within Ring 1: Device Drivers may allow an escalation …
-
Medium 6.8
Improper input validation for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Dr…
-
Medium 6.9
Out-of-bounds write for the Intel(R) VTune(TM) Profiler software before version 2026.0.0 within Ring 1: Device Drivers …
-
Medium 6.3
Incorrect default permissions for the Intel(R) VTune(TM) Profiler software within Ring 3: User Applications may allow a…
-
Medium 5.4
Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications m…
-
Medium 6.8
Deadlock for some Intel(R) Arc(TM) B-series graphics cards within Ring 1: Device Drivers may allow a denial of service.…
-
Medium 5.4
Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications ma…
-
Medium 5.4
Uncontrolled search path for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may all…
-
Medium 5.4
Incorrect default permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications ma…
-
High 8.7
LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects
LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect (kinds openapi/graphql, and resolve_source's docs_url) pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and re…
-
Medium 6.8
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Heap-based Buffer Overflow” by local …
-
Medium 6.8
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Write” by local access.…
-
Medium 4.8
AMI APTIOV contains vulnerabilities in BIOS where privileged users may cause the “Out-of-Bounds Read” by local access. …
-
Medium 4.6
AMI APTIOV contains a vulnerability in BIOS where a privileged user may cause the “Out-of-Bound Read” by local access. …
-
Critical 9.8
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, a heap buffer overflow exists in …
-
High 7.4
rabbitmq-c: amqp_decode_bytes size_t integer overflow bypasses bounds check on 32-bit (OOB read)
rabbitmq-c is a C-language AMQP client library for RabbitMQ. Prior to version 0.17.0, the bounds check (*offset = o + len) <= encoded.len overflows when o + len > SIZE_MAX on 32-bit systems. len is a uint32_t read from the AMQP wire as a BYTES/UTF8 field leng…
-
High 8.8
WordPress WPIDE – File Manager & Code Editor plugin <= 3.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in XplodedThemes WPIDE – File Manager & Code Editor wpide allows Cross Site Request Forgery.This issue affects WPIDE – File Manager & Code Editor: from n/a through 3.6.4.
-
Medium 4.9
Exposure of PII in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attacker…
-
High 8.8
Missing Authentication Vulnerability in NETGEAR Nighthawk RAX30 models
A missing authentication vulnerability in the listed NETGEAR RAX models allows an network adjacent attacker who has authenticated to wifi network to obtain sensitive information and tamper with device configuration, including administrator credentials, withou…
-
Medium 4.5
Insufficient Input Validation Vulnerability in NETGEAR Orbi RBR350
An insufficient input validation vulnerability in the listed NETGEAR Orbi Models router allows an authenticated administrator connected to the local network to execute unauthorized commands and modify the router’s software and functionality, potentially compr…
-
Medium 5.5
An exposed dangerous function in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a local authentic…
-
Medium 4.9
Argument injection in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticated attac…
-
Medium 4.9
Improper input validation in Ivanti EPMM before version 12.11.0.0, 12.10.0.1, and 12.9.0.3 allows a remote authenticate…
-
Low 2.3
In Eclipse Kura versions 3.1.0 to 5.6.2, the iBeacon and Eddystone advertisement decoders wrongly parse the AD-structur…