CVE-2022-32231: Improper Initialization

Improper initialization in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-30339: Out-of-bounds Read

Out-of-bounds read in firmware for the IntelR Integrated Sensor Solution before versions 5.4.2.4579v3, 5.4.1.4479 and 5.0.0.4143 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-34849: Improper Handling of Exceptional Conditions

Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...

PT-2023-13424

Name of the Vulnerable Software and Affected Versions IntelR Media SDK versions prior to 22.2.2 Description The issue is related to improper buffer restrictions, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations For versions prio...

CVE-2022-36289: Undefined Security Weakness

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-34841: Improper Restriction of Operations within the Bounds of a Memory Buffer

Improper buffer restrictions in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-35883: NULL Pointer Dereference

NULL pointer dereference in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2022-27170: Undefined Security Weakness

Protection mechanism failure in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-34346: Out-of-bounds Read

Out-of-bounds read in the IntelR Media SDK software before version 22.2.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2023-13450

Name of the Vulnerable Software and Affected Versions IntelR Media SDK versions prior to 22.2.2 Description The issue is related to a NULL pointer dereference in the IntelR Media SDK software, which may allow an authenticated user to potentially enable denial of service via local access...

SUSE CVE-2007-3961

Off-by-one error in the fspreaddirr function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a denial of service via a directory entry whose length is exactly MAXNAMELEN, which prevents a terminating null byte from being added...

SUSE CVE-2016-8630

The x86decodeinsn function in arch/x86/kvm/emulate.c in the Linux kernel before 4.8.7, when KVM is enabled, allows local users to cause a denial of service host OS crash via a certain use of a ModR/M byte in an undefined instruction...

SUSE CVE-2019-10099

Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk controlled by spark.maxRemoteBlockSizeFetchToMem; in SparkR, using parallelize; in Pyspark, using...

SUSE CVE-2022-46663

In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal...

PT-2023-9409

Name of the Vulnerable Software and Affected Versions 3rd Generation IntelR XeonR Scalable Processors affected versions not specified Description The issue is related to an incorrect calculation in the microcode keying mechanism, which may allow a privileged user to potentially enable information...

PT-2023-9410

Name of the Vulnerable Software and Affected Versions IntelR XeonR Processors affected versions not specified Description The issue concerns incorrect default permissions in some memory controller configurations for IntelR XeonR Processors when using IntelR Software Guard Extensions. This may all...

B&R Systems Diagnostics Manager Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple XSS Vulnerabilities product: B&R Systems Diagnostics Manager vulnerable version: =3.00 and =D4.93 CVE number: CVE-2022-4286 impact: medium homepage:...

Cross site scripting

A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...

CVE-2022-4286 Reflected Cross-Site Scripting Vulnerabilities in Automation Runtime

A reflected cross-site scripting XSS vulnerability exists in System Diagnostics Manager of B&R Automation Runtime versions =3.00 and =C4.93 that enables a remote attacker to execute arbitrary JavaScript in the context of the users browser session...

CVE-2022-4286

Summary: CVE-2022-4286 affects B&R Automation Runtime’s System Diagnostics Manager, with vulnerable versions 3.00 through C4.93. A reflected XSS allows a remote attacker to execute arbitrary JavaScript in the victim’s browser session. The root cause is improper neutralization of input during web ...