17029 matches found
CVE-2024-36284
Improper input validation in some IntelR Neural Compressor software before version v3.0 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2024-50414
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Buttonizer Button contact VR button-contact-vr allows Stored XSS.This issue affects Button contact VR: from n/a through = 4.7.9.1...
CVE-2023-39902
A software vulnerability has been identified in the U-Boot Secondary Program Loader SPL before 2023.07 on select NXP i.MX 8M family processors. Under certain conditions, a crafted Flattened Image Tree FIT format structure can be used to overwrite SPL memory, allowing unauthenticated software to...
CVE-2023-52122
Cross-Site Request Forgery CSRF vulnerability in PressTigers Simple Job Board.This issue affects Simple Job Board: from n/a through 2.10.6...
CVE-2023-47831
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in assortedchips DrawIt draw.Io plugin = 1.1.3 versions...
CVE-2023-32311
CloudExplorer Lite is an open source cloud management platform. In CloudExplorer Lite prior to version 1.1.0 users organization/workspace permissions are not properly checked. This allows users to add themselves to any organization. This vulnerability has been fixed in v1.1.0. Users are advised t...
CVE-2023-5807
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in TRtek Software Education Portal allows SQL Injection. This issue affects Education Portal: before 3.2023.29...
CVE-2023-27517
Improper access control in some IntelR OptaneTM PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access...
CVE-2023-42776
Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...
CVE-2023-24404
Reflected Cross-Site Scripting XSS vulnerability in VryaSage Marketing Performance plugin = 2.0.0 versions...
CVE-2023-39932
Uncontrolled search path in the IntelR SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of privilege via local access...
CVE-2023-44991
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Jordy Meow Media File Renamer: Rename Files Manual, Auto & AI.This issue affects Media File Renamer: Rename Files Manual, Auto & AI: from n/a through 5.6.9...
CVE-2023-35062
Improper access control in some IntelR DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-41033
A vulnerability has been identified in Parasolid V35.0 All versions V35.0.260, Parasolid V35.1 All versions V35.1.246, Parasolid V36.0 All versions V36.0.156, Simcenter Femap V2301 All versions V2301.0003, Simcenter Femap V2306 All versions V2306.0001. The affected application contains an out of...
Command Injection
nitsan/ns-backup is vulnerable to Command Injection. The vulnerability is due to insufficient input validation, which allows user-supplied data to be interpreted as part of a system command...
CVE-2025-48708
gslibctxstashsanitizedarg in base/gslibctx.c in Artifex Ghostscript before 10.05.1 lacks argument sanitization for the case. A created PDF document includes its password in cleartext...
CVE-2023-32283
Insertion of sensitive information into log file in some IntelR On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authenticated user to potentially enable information disclosure via local access...
CVE-2023-39929
Uncontrolled search path in some Libva software maintained by IntelR before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access...