6118 matches found
CVE-2025-48740
A Cross-Site Request Forgery CSRF vulnerability in StrangeBee TheHive 5.2.0 before 5.2.16, 5.3.0 before 5.3.11, 5.4.0 before 5.4.10, and 5.5.0 before 5.5.1 allows a remote attacker to trigger requests on their victim's behalf, if the attacker lures a privileged user, authenticated with basic...
CVE-2022-24308
Automox Agent prior to version 37 on Windows and Linux and Version 36 on OSX could allow for a non privileged user to obtain sensitive information during the install process...
CVE-2022-41984
Protection mechanism failure for some IntelR ArcTM graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-41659
Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-21140
Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-40974
Incomplete cleanup in the IntelR IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-1179
Non-Privilege User Can Created New Rule and Lead to Stored Cross Site Scripting in GitHub repository openemr/openemr prior to 6.0.0.4...
CVE-2022-36794
Improper condition check in some IntelR SPS firmware before version SPSE306.00.03.300.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-36382
Out-of-bounds write in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 1.7.0.8 and some IntelR Ethernet 700 Series Controllers and Adapters before version 9.101 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-36287
Uncaught exception in the FCS Server software maintained by Intel before version 1.1.79.3 may allow a privileged user to potentially enable denial of service via physical access...
CVE-2022-34849
Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-34657
Improper input validation in firmware for some IntelR PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-34100
A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a low-privileged user can gain a SYSTEM level command prompt by pre-staging a file structure prior to the installation of a trusted service executable and change permissions on that file...
CVE-2022-32256
A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application consists of a web service that lacks proper access control for some of the endpoints. This could lead to low privileged users accessing privileged information...
CVE-2022-30944
Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-30531
Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-28625
A local disclosure of sensitive information vulnerability was discovered in HPE OneView versions: Prior to 7.0 or 6.60.01. A low privileged user could locally exploit this vulnerability to disclose sensitive information resulting in a complete loss of confidentiality, integrity, and availability...
CVE-2022-29515
Missing release of memory after effective lifetime in firmware for IntelR SPS before versions SPSE306.00.03.035.0 may allow a privileged user to potentially enable denial of service via local access...