SUSE: Security Advisory (SUSE-SU-2018:1482-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:14546-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-33829: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the HTML Data Processor in CKEditor 4 4.14.0 through 4.16.x before 4.16.1 allows remote attackers to inject executable JavaScript code through a crafted comment because --! is mishandled...

CVE-2020-8702: Uncontrolled Search Path Element

Uncontrolled search path element in the IntelR Processor Diagnostic Tool before version 4.1.5.37 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2021-4279

Name of the Vulnerable Software and Affected Versions CKEditor 4 versions 4.14.0 through 4.16.x Description A cross-site scripting XSS vulnerability in the HTML Data Processor allows remote attackers to inject executable JavaScript code through a crafted comment because --! is mishandled. This...

Intel Processor Diagnostic Tool code-related vulnerabilities

Intel Processor Diagnostic Tool IPDT is a processor functionality diagnostic tool from IntelR Corporation. A security vulnerability exists in IntelR Processor Diagnostic Tool versions prior to 4.1.5.37, which stems from an uncontrolled search path element in the tool that could allow an...

CKEditor cross-site scripting vulnerability

CKEditor is an open source, web-based text editor. CKEditor suffers from a cross-site scripting vulnerability that stems from improper handling of input data in the HTML data processor. A remote attacker can inject executable JavaScript code via a crafted comment. The following products and model...

PT-2021-17000 · Amd +11 · All Supported Processors +8

Name of the Vulnerable Software and Affected Versions: All supported CPU products affected versions not specified Description: The issue concerns potential floating point value injection in CPU products, which, when combined with software vulnerabilities related to speculative execution, can lead...

PT-2021-12810

Name of the Vulnerable Software and Affected Versions: IntelR Processor Diagnostic Tool versions prior to 4.1.5.37 Description: The issue is related to an uncontrolled search path element in the IntelR Processor Diagnostic Tool, which may allow an authenticated user to potentially enable escalati...

CVE-2020-24512

Observable timing discrepancy in some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

Intel® Processor Advisory

Summary: Potential security vulnerabilities in some Intel® Processors may allow information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-24511 Description: Improper isolation of shared resources in some IntelR...

Intel® Security Library Advisory

Summary: Potential security vulnerabilities in the Intel® Security Library may allow escalation of privilege, denial of service or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2021-0133 Description: Key...

Intel® Processor Diagnostics Tool Advisory

Summary: A potential security vulnerability in the Intel® Processor Diagnostics Tool may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8702 Description: Uncontrolled search path element in the...

Intel INTEL-SA-00463 Buffer Error Vulnerability

Intel INTEL-SA-00463 is the BIOS firmware for Intel® processors from Intel Corporation USA. INTEL-SA-00463 suffers from a buffer error vulnerability that stems from a processor firmware out-of-bounds write that could allow a privileged user to enable denial of service via local access...

Intel Processors: Input validation error vulnerability

Intel Processors are American Intel Corporation's offerings for interpreting computer instructions and processing data in computer software. An input validation error vulnerability exists in the firmware of Intel Processors, which arises from a network system or product that does not properly...

org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta2) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.1.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.1.0.beta2 Source cves:...

com.github.bingoohuang:quartz-glass (>=0.0.1, <=0.0.9), org.hibernate:hibernate-validator-annotation-processor (4.1.0.beta1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.1.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.1.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - com.github.bingoohuang:quartz-glass =0.0.1, =0.0.9 -...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta2) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.2.0.beta2)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta2 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.beta1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.2.0.beta1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.beta1 Source cves:...

org.hibernate:hibernate-validator-annotation-processor (4.2.0.cr1) potentially affected by CVE-2020-10693 via org.hibernate:hibernate-validator (4.2.0.cr1)

org.hibernate:hibernate-validator MAVEN version 4.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on org.hibernate:hibernate-validator and may be impacted: - org.hibernate:hibernate-validator-annotation-processor 4.2.0.cr1 Source cves:...