Intel® RST Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Rapid Storage Technology RST software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-43456 Description: Uncontrolled search path in...

Intel® Quartus® for Linux Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-00800.html...

Intel® RealSenseTM SDK Advisory

Summary: A potential security vulnerability in some Intel® RealSense™ Software Development Kits SDKs may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-32663 Description: Incorrect default...

Intel® VROC Software Advisory

Summary: A potential security vulnerability in some Intel® Virtual RAID on CPU VROC software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-45112 Description: Improper access control in some...

Intel® VCUST Tool Advisory

Summary: A potential security vulnerability in some Intel® VCUST Tool software may allow escalation of privilege. Intel is releasing a software update to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-25944 Description: Uncontrolled search path element in some Intel...

PT-2023-19570 · I Thirteen Web Solution · Wp Responsive Tabs

Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugin versions prior to 1.1.15 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker ca...

PT-2023-19240 · Pierre Jehan · Owl Carousel

Name of the Vulnerable Software and Affected Versions: Pierre JEHAN Owl Carousel plugin versions = 0.5.3 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For Pierre JEHAN Owl Carousel plugin...

PT-2023-26990 · Unknown · Social Media Skeleton

Name of the Vulnerable Software and Affected Versions: social-media-skeleton versions 1.0.0 through 1.0.3 Description: The issue is a stored cross-site scripting vulnerability in an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Recommendations: For...

PT-2023-4639 · Adobe · Acrobat Reader +1

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 23.003.20244 and earlier Adobe Acrobat Reader versions 20.005.30467 and earlier Adobe Acrobat 2020 Adobe Acrobat Reader 2020 Description: The issue is related to a Use After Free vulnerability that could result i...

PT-2023-4407 · Intel · Intel Nuc Pro Software Suite For Windows +1

Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite for Windows versions prior to 2.0.0.9 Intel Support application for Android affected versions not specified Description: The issue is related to improper authorization, which may allow a privileged user to...

PT-2023-4772 · Unknown · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.4 Description: A vulnerability has been identified that allows authenticated remote attackers to execute arbitrary SQL queries on the server database and escalate privileges. The issue is related to the...

PT-2023-4395 · Intel · Intel Onevpl Gpu

Name of the Vulnerable Software and Affected Versions: IntelR oneVPL GPU software versions prior to 22.6.5 Description: The issue is related to improper neutralization in the software, which may allow an authenticated user to potentially enable denial of service via local access. This could be...

Intel® SDP Tool Software Advisory

Summary: A potential security vulnerability in some Intel® Server Debug and Provisioning SDP Tool software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-31246 Description: Incorrect default...

PT-2023-26583 · Unknown · Special Interest Group Network For Analysis/Liaison

Name of the Vulnerable Software and Affected Versions: Special Interest Group Network for Analysis and Liaison versions 4.4.0 through 4.7.7 Description: The issue allows authorized API users to view the organization information of the information receiver that is set as "non-disclosure" in the...

PT-2023-4411 · Intel · Intel Server Board M10Jnp2Sb Bmc Video Driver

Name of the Vulnerable Software and Affected Versions: IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 3.0 for Microsoft Windows IntelR Server Board M10JNP2SB BMC Video Driver versions prior to 1.13.4 for Linux Description: The issue is related to an uncontrolled search path...

PT-2023-21110 · Unknown · Everest News

Name of the Vulnerable Software and Affected Versions: Everest News theme versions prior to 1.1.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker could potentially inject malicious scripts into a website using the Evere...

Intel® Unite® Software Advisory

Summary: Potential security vulnerabilities in some Intel® Unite® software may allow escalation of privilege. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25773 Description: Improper access control in the IntelR UniteR Hub...

Intel Unite® Android App Advisory

Summary: Potential security vulnerabilities in the Intel Unite® android application may allow information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-32609 Description: Improper access control in the Intel...

JVN#42527152: "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly

"FFRI yarai" and "FFRI yarai Home and Business Edition" provided by FFRI Security, Inc. handle exceptional conditions improperly CWE-703. When the product's Windows Defender management feature is enabled, and Microsoft Defender detects some files matching specific conditions as a threat, the...

PT-2023-28146 · Unknown · Instantsoft/Icms2

Name of the Vulnerable Software and Affected Versions: instantsoft/icms2 versions prior to 2.16.1-git Description: The issue is related to Cross-site Scripting XSS - Reflected. This is a type of security vulnerability that occurs when an application takes user input and sends it back to the user...