Lucene search
+L

12720 matches found

Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•19 views

PT-2024-19046

Name of the Vulnerable Software and Affected Versions IntelR Advisor versions prior to 2024.0 Description The issue is related to an uncontrolled search path in IntelR Advisor software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS6AI score0.00191EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•31 views

PT-2024-29798 · WordPress · Tutor Lms

Name of the Vulnerable Software and Affected Versions: Tutor LMS plugin for WordPress versions prior to 2.8.0 is not specified, however, the versions up to and including 2.7.0 are affected. Description: The issue allows unauthorized access, modification, and loss of data due to a missing capabili...

9.8CVSS5.6AI score0.00517EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•12 views

PT-2024-11973 · Intel +2 · Intel Onevpl +3

Name of the Vulnerable Software and Affected Versions: IntelR Media SDK versions prior to 23.3.5 IntelR oneVPL software versions prior to 23.3.5 Description: The issue is an out-of-bounds read that may allow an authenticated user to potentially enable escalation of privilege via local access...

9.8CVSS6.4AI score0.01534EPSS
SaveExploits1References102
Positive Technologies
Positive Technologies
•added 2024/05/16 12:00 a.m.•12 views

PT-2024-13435 · Intel +2 · Intel Media Sdk +3

Name of the Vulnerable Software and Affected Versions: IntelR Media SDK all versions IntelR oneVPL software versions prior to 23.3.5 Description: The issue is an out-of-bounds write that may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendation...

9.8CVSS6.3AI score0.01534EPSS
SaveExploits1References87
Cisco
Cisco
•added 2024/05/15 4:00 p.m.•59 views

Cisco Secure Email Gateway HTTP Response Splitting Vulnerability

A vulnerability in the web-based management API of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to conduct an HTTP response splitting attack. This vulnerability is due to insufficient input validation of some parameters that are passed to t...

6.1CVSS6.1AI score0.00389EPSS
SaveExploits0References1
Cisco
Cisco
•added 2024/05/15 4:00 p.m.•36 views

Cisco AppDynamics Network Visibility Service Denial of Service Vulnerability

A vulnerability in Cisco AppDynamics Network Visibility Agent could allow an unauthenticated, local attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to the inability to handle unexpected input. An attacker who has local device access could explo...

5.5CVSS5.7AI score0.00144EPSS
SaveExploits0References1
NCSC
NCSC
•added 2024/05/15 12:47 p.m.•29 views

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed vulnerabilities in iOS and iPadOS. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service DoS - Remote code execution Administrator/Root rights - Remote code execution User rights - Access to...

9.8CVSS7.1AI score0.01502EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•13 views

PT-2024-40245 · Ez Systems · Ez Platform

Name of the Vulnerable Software and Affected Versions: eZ Platform versions 2.x Description: The issue affects the password reset functionality in the eZ Platform Admin UI, making it vulnerable to brute force attacks. Depending on the configuration, an attacker may exploit this to gain control ov...

7.4AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•23 views

PT-2024-20730 · Insyde · Insydeh2O

Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O kernel versions 5.2 through 5.2 before 05.29.09 Insyde InsydeH2O kernel versions 5.3 through 5.3 before 05.38.09 Insyde InsydeH2O kernel versions 5.4 through 5.4 before 05.46.09 Insyde InsydeH2O kernel versions 5.5 through 5....

7.4CVSS6.1AI score0.0015EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•29 views

PT-2024-26955 · WordPress · Hl Twitter Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: HL Twitter WordPress plugin versions through 2014.1.18 Description: The issue concerns a lack of CSRF check when unlinking Twitter accounts, potentially allowing attackers to make logged-in admins perform such actions via a CSRF attack...

4.3CVSS5.8AI score0.00211EPSS
SaveExploits2References4
Lenovo
Lenovo
•added 2024/05/14 8:41 p.m.•13 views

Intel Arc & Iris Xe Graphics Software Advisory - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Lenovo
Lenovo
•added 2024/05/14 7:15 p.m.•17 views

Intel Thunderbolt Driver Advisory - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Lenovo
Lenovo
•added 2024/05/14 5:46 p.m.•11 views

Intel CST Software Advisory - Lenovo Support US

No description provided...

6.8AI score
SaveExploits0
Intel
Intel
•added 2024/05/14 12:00 a.m.•59 views

Intel® Computing Improvement Program Software Advisory

Summary: A potential security vulnerability in some Intel® Computing Improvement Program software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21843 Description: Uncontrolled search path for...

6.7CVSS6.1AI score0.00174EPSS
SaveExploits0
Intel
Intel
•added 2024/05/14 12:00 a.m.•33 views

Intel® DSA Software Uninstaller Advisory

Summary: A potential security vulnerability in some Intel® Driver & Support Assistant DSA software uninstallers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-45743 Description: Uncontrolled...

7.3CVSS6.1AI score0.00209EPSS
SaveExploits0
Intel
Intel
•added 2024/05/14 12:00 a.m.•31 views

Endurance Gaming Mode Software Advisory

Summary: A potential security vulnerability in some Endurance Gaming Mode software installers may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-42433 Description: Incorrect default permissions in...

6.7CVSS6.1AI score0.00173EPSS
SaveExploits0
Intel
Intel
•added 2024/05/14 12:00 a.m.•30 views

Intel® VTune™ Profiler Advisory

Summary: A potential security vulnerability in some Intel® VTune™ Profiler software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-45320 Description: Uncontrolled search path element in some...

7.8CVSS6AI score0.00177EPSS
SaveExploits0
Intel
Intel
•added 2024/05/14 12:00 a.m.•32 views

Intel® Arc™ Control Software Advisory

Summary: Potential security vulnerabilities in some Intel® Arc™ Control software may allow escalation of privilege or denial of service. Intel is releasing updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-29165 Description: Unquoted search path or elemen...

7.8CVSS6.4AI score0.00206EPSS
SaveExploits0
Intel
Intel
•added 2024/05/14 12:00 a.m.•31 views

Intel® Trace Analyzer and Collector Software Advisory

Summary: A potential security vulnerability in some Intel® Trace Analyzer and Collector software may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-22384 Description: Out-of-bounds read for some...

2.8CVSS5.9AI score0.00196EPSS
SaveExploits0
Intel
Intel
•added 2024/05/14 12:00 a.m.•34 views

Intel® Arc™ & Iris® Xe Graphics Software Advisory

Summary: Potential security vulnerabilitiy in some Intel® Arc™ & Iris® Xe Graphics software may allow escalation of privilege. Intel is releasing updates to mitigate these potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21864 Description: Improper neutralization in some Intel® Arc...

7.8CVSS7.3AI score0.00342EPSS
SaveExploits0
Rows per page
Query Builder