CVE-2025-20046

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-45371

Improper access control for some IntelR Arc™ & IrisR Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-47795

CVE-2024-47795 affects Intel® oneAPI DPC++/C++ Compiler (and FPGA Support Package for Windows) prior to 2025.0.0. The vulnerability is an uncontrolled search path that could enable local privilege escalation when an authenticated user gains local access. The issue is supported by multiple feeds (...

CVE-2024-46895

CVE-2024-46895 concerns Intel graphics software (Arc and Iris Xe). The vulnerability is an uncontrolled search path in Intel® Arc™ & Iris® Xe graphics software before version 32.0.101.6083/32.0.101.5736, which may allow an authenticated user to escalate privileges via local access. The issue is r...

CVE-2024-43101

Improper access control for some IntelR Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-22843

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20095

Incorrect Default Permissions for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

CVE-2025-20015 affects Intel® Ethernet Connections Boot Utility before version 29.4. The vulnerability is an uncontrolled search path element that could allow an authenticated, local user to escalate privileges. Intel’s advisory INTEL-SA-01294 describes vulnerable versions prior to 29.4 and recom...

CVE-2025-20015

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20008

Insecure inherited permissions for some IntelR SimicsR Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access...

WordPress Uncanny Automator plugin <= 6.4.0.2 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update vulnerability

Missing Authorization to Authenticated Subscriber+ Plugin Settings Update vulnerability discovered by mikemyers in WordPress Plugin Uncanny Automator versions = 6.4.0.2...

Court Rules Against NSO Group

The case is over: A jury has awarded WhatsApp $167 million in punitive damages in a case the company brought against Israel-based NSO Group for exploiting a software vulnerability that hijacked the phones of thousands of users. I'm sure it'll be appealed. Everything always is...

CVE-2025-30176

A vulnerability has been identified in SIMATIC PCS neo V4.1 All versions, SIMATIC PCS neo V5.0 All versions, SINEC NMS All versions V4.0, SINEMA Remote Connect All versions, Totally Integrated Automation Portal TIA Portal V17 All versions, Totally Integrated Automation Portal TIA Portal V18 All...

BELL-CVE-2023-53145

Bulletin has no description...

PrivEsc (Privilege Escalation) in Jira Service Management Data Center

This High severity PrivEsc Privilege Escalation vulnerability was introduced in versions 5.12.0, 10.3.0, 10.4.0, and 10.5.0 of Jira Service Management Data Center. This PrivEsc Privilege Escalation vulnerability, with a CVSS Score of 7.2, allows an attacker to perform actions as a higher-privileg...

PT-2025-23255 · Freescout · Freescout

Name of the Vulnerable Software and Affected Versions: FreeScout versions prior to 1.8.180 Description: FreeScout is a free self-hosted help desk and shared mailbox. The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input...

PT-2025-20935 · Amd · Amd Cloud Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Cloud Manageability Service affected versions not specified Description: The issue is related to an unquoted search path within the AMD Cloud Manageability Service, which can be exploited by a local attacker to escalate privileges. This...

PT-2025-21050 · Intel · Intel(R) Oneapi Level Zero

Name of the Vulnerable Software and Affected Versions: IntelR oneAPI Level Zero affected versions not specified Description: The issue is related to an uncontrolled search path in some IntelR oneAPI Level Zero software, which may allow an authenticated user to potentially enable escalation of...

PT-2025-21064 · Intel · Intel Xeon 6 Processor E-Cores Firmware

Name of the Vulnerable Software and Affected Versions: IntelR XeonR 6 processor E-Cores firmware affected versions not specified Description: The issue is related to insufficient control flow management in the Alias Checking Trusted Module. This may allow a privileged user to potentially enable...