CVE-2024-36293

Improper access control in the EDECCSSA user leaf function for some IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-36293

CVE-2024-36293 concerns Intel SGX with improper access control in the EDECCSSA user leaf function, potentially enabling denial of service via local access by an authenticated user. Connected sources confirm the issue affects Intel processors and is addressed through microcode updates. Debian LTS ...

CVE-2024-39356

NULL pointer dereference in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-24582

Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...

CVE-2023-34440

Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-30211

Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-38307

Improper input validation in the firmware for some IntelR AMT and IntelR Standard Manageability may allow an authenticated user to potentially enable denial of service via network access...

CVE-2024-21830

Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-41934

CVE-2024-41934 affects Intel® GPA software and Intel® GPA Framework prior to version 2024.3, with an improper access control vulnerability that may allow an authenticated local attacker to cause a denial of service. Multiple sources (Intel advisory, Red Hat CVE page, PT-security entry) confirm th...

CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface

An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PH...

CVE-2025-1215

A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...

CVE-2025-25343

creationtimestamp| type| source ---|---|--- 2025-02-12 18:41:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113992381212711969 2025-02-12 19:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4sonws2h 2025-02-12 22:19:49+00:00| seen|...

CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching

Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...

CVE-2025-25199

creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187510032617 2025-02-12 18:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrrbreq52s 2025-02-12 20:14:01+00:00| seen|...

CVE-2025-25198

creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187494675681 2025-02-12 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s 2025-02-12 20:14:00+00:00| seen|...

CVE-2025-25198 mailcow: dockerized vulnerable to password reset poisoning

mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the Host HTTP header to generate a password reset link pointing to an attacker-controlled domain. This...

CVE-2025-1213

creationtimestamp| type| source ---|---|--- 2025-02-12 17:33:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113992114736691216 2025-02-12 18:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrqzweuo2s 2025-02-12 20:14:01+00:00| seen|...

CVE-2025-0818

creationtimestamp| type| source ---|---|--- 2025-02-12 17:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyofqunhf2x 2025-02-12 17:15:46+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyoft4tyv2x 2025-02-12 18:19:50+00:00| seen|...

CVE-2025-25184

CVE-2025-25184 affects Rack (Ruby) where CRLF injection in usernames can be logged by Rack::CommonLogger when credentials are supplied via Rack::Auth::Basic. The issue enables log entry manipulation by including CRLF and whitespace in the username, potentially breaking log formats or injecting fr...

CVE-2025-25351

creationtimestamp| type| source ---|---|--- 2025-02-12 16:16:48+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl4fhqyr2d 2025-02-12 18:19:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4skb227 2025-02-12 18:33:22+00:00| seen|...