CVE-2022-36372: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in some IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-38102: Improper Input Validation

Improper Input validation in firmware for some IntelR Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-38083: Improper Initialization

Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-24877

Name of the Vulnerable Software and Affected Versions IntelR NUC BIOS firmware affected versions not specified Description A race condition in the IntelR NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations At the moment,...

CVE-2023-34355: Uncontrolled Search Path Element

Uncontrolled search path element for some IntelR Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before version 1.13.4 for linux may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29151: Uncontrolled Search Path Element

Uncontrolled search path element in some IntelR PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-29494: Improper Input Validation

Improper input validation in BIOS firmware for some IntelR NUCs may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-29500: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in BIOS firmware for some IntelR NUCs may allow a privilege user to potentially enable information disclosure via local access...

PT-2023-13588

Name of the Vulnerable Software and Affected Versions IntelR Converged Security and Management Engine versions prior to 15.0.45 IntelR Converged Security and Management Engine versions prior to 16.1.27 Description The issue is related to improper input validation in the firmware of some IntelR...

PT-2023-21393

Name of the Vulnerable Software and Affected Versions IntelR NUCs affected versions not specified Description The issue is related to improper initialization in BIOS firmware, which may allow a privileged user to potentially enable information disclosure via local access. Recommendations At the...

PT-2023-18502

Name of the Vulnerable Software and Affected Versions IntelR NUC 13 Extreme Compute Element affected versions not specified IntelR NUC 13 Extreme Kit affected versions not specified IntelR NUC 11 Performance Kit affected versions not specified IntelR NUC 11 Performance Mini PC affected versions n...

PT-2023-12919

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper buffer restrictions in the BIOS firmware, which may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-4491

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to insufficient validation of user input in the BIOS firmware for some Intel processors. This may allow a privileged user to potentially enable escalation of...

PT-2023-21094

Name of the Vulnerable Software and Affected Versions IntelR oneAPI Toolkit versions prior to 4.3.1.493 Description The issue is related to improper access control in some IntelR oneAPI Toolkit and component software installers, which may allow a privileged user to potentially enable escalation o...

PT-2023-24521

Name of the Vulnerable Software and Affected Versions IntelR RealSenseTM ID software for IntelR RealSenseTM 450 FA version 0.25.0 Description The issue is related to improper buffer restrictions in the IntelR RealSenseTM ID software, which may allow an authenticated user to potentially enable...

PT-2023-12825

Name of the Vulnerable Software and Affected Versions IntelR oneMKL versions prior to 2022.0 Description The issue is related to an uncontrolled search path in some IntelR oneMKL software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-13584

Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper initialization in the BIOS firmware for some IntelR Processors, which may allow a privileged user to potentially enable information disclosure via...

Malicious code in puppet-module-posix-system-r (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2ad3a13f7c087320a9f4bf76203fd40172a2b55172dec3ac957ad4d265c01425 The OpenSSF Package Analysis project identified 'puppet-module-posix-system-r' @ 1.0.0 rubygems as malicious. It is considered malicious because...

CVE-2023-37860

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon...

CVE-2023-37860: Missing Authorization

In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 daemon...