5923 matches found
CVE-2022-40974
Incomplete cleanup in the IntelR IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-1179
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-36794
Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-36382
Out-of-bounds write in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some IntelR Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-36287
Uncaught exception in the FCS Server software maintained by Intel before version 1.1.79.3 may allow a privileged user to potentially enable denial of service via physical access...
CVE-2022-34849
Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-34657
Improper input validation in firmware for some IntelR PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-34100
A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...
CVE-2022-32256
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information...
CVE-2022-30944
Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-30531
Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-28625
A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...
CVE-2022-29515
Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-27879
Improper buffer restrictions in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-22571
An authenticated high privileged user can perform a stored XSS attack due to incorrect output encoding in Incapptic connect and affects all current versions...
CVE-2022-2346
In affected versions of Octopus Deploy it is possible for a low privileged guest user to interact with extension endpoints...
CVE-2022-39949
An improper control of a resource through its lifetime vulnerability CWE-664 in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection...
CVE-2021-25898
An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored in unencrypted source-code text files. This was noted when accessing the svc-login.php file. The value is used to authenticate a high-privileged user upon authenticating with the server...
CVE-2021-32594
An unrestricted file upload vulnerability in the web interface of FortiPortal 6.0.0 through 6.0.4, 5.3.0 through 5.3.5, 5.2.0 through 5.2.5, and 4.2.2 and earlier may allow a low-privileged user to potentially tamper with the underlying system's files via the upload of specifically crafted files...