6046 matches found
Shopware XSS Vulnerability
Shopware v5.2.5 - v5.3 is vulnerable to cross site scripting in the customer and order section of the content management system backend modules. Remote attackers are able to inject malicious script code into the firstname, lastname, or order input fields to provoke persistent execution in the...
CVE-2022-1552
A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pgamcheck commands activated relevant protections too late or no...
CVE-2022-1648
Pandora FMS v7.0NG.760 and below allows a relative path traversal in File Manager where a privileged user could upload a .php file outside the intended images directory which is restricted to execute the .php file. The impact could lead to a Remote Code Execution with running application privileg...
GHSA-4W62-CQ5R-5MMQ express-cart unrestricted file upload vulnerability
Unrestricted file upload RCE in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine...
CVE-2021-33083
Improper authentication in firmware for some IntelR SSD, IntelR OptaneTM SSD, IntelR OptaneTM SSD DC and IntelR SSD DC Products may allow an privileged user to potentially enable information disclosure via local access...
CVE-2021-33078
Race condition within a thread in firmware for some IntelR OptaneTM SSD and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...
CVE-2021-0159
Improper input validation in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
CVE-2021-33075
Race condition in firmware for some IntelR OptaneTM SSD, IntelR OptaneTM SSD DC and IntelR SSD DC Products may allow a privileged user to potentially enable denial of service via local access...
CVE-2021-0153
Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
CVE-2021-0193
Improper authentication in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...
CVE-2021-33069
Improper resource shutdown or release in firmware for some IntelR SSD, IntelR SSD DC, IntelR OptaneTM SSD and IntelR OptaneTM SSD DC may allow a privileged user to potentially enable denial of service via local access...
Input validation
Improper input validation in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
Authentication flaw
Improper authentication in the IntelR In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access...
Design/Logic Flaw
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
Input validation
Improper input validation for some IntelR XeonR Processors may allow a privileged user to potentially enable denial of service via local access...
Input validation
Improper input validation in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
Cross site scripting
Out-of-bounds write in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
Design/Logic Flaw
Unintended intermediary in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
Improper access control
Improper access control in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
