12582 matches found
PT-2023-14781 · WordPress · Nickys Image Map Pro
Name of the Vulnerable Software and Affected Versions: Nickys Image Map Pro for WordPress - Interactive SVG Image Map Builder plugin versions prior to 5.6.9 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick...
PT-2023-15414 · WordPress · Fugu Maintenance Switch
Name of the Vulnerable Software and Affected Versions: Fugu Maintenance Switch plugin versions = 1.5.2 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website, potentially leading to...
PT-2023-14007 · Intel · Intel Ipp Cryptography
Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to insufficient control flow management, which may allow an unauthenticated user to potentially enable information disclosure via local access...
PT-2023-14516 · Intel · Intel Dcm
Name of the Vulnerable Software and Affected Versions: IntelR DCM software versions prior to 5.1 Description: The issue is related to improper authentication in the IntelR DCM software, which may allow an authenticated user to potentially enable escalation of privilege via network access...
PT-2023-13484 · Intel · Intel Nuc Pro Software Suite
Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to incorrect default permissions in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privile...
PT-2023-13083 · Intel · Intel Nuc Pro Software Suite
Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to improper access control, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: For...
PT-2023-12662 · Intel · Intel Nuc Hdmi Firmware Update Tool
Name of the Vulnerable Software and Affected Versions: IntelR HDMI Firmware Update tool for NUC versions prior to 1.79.1.1 Description: The issue is related to an uncontrolled search path in the IntelR HDMI Firmware Update tool for NUC, which may allow an authenticated user to potentially enable...
PT-2023-18610 · Intel · Intel Server Board Bmc Firmware
Name of the Vulnerable Software and Affected Versions: IntelR Server Board BMC firmware versions prior to 2.90 Description: A buffer overflow issue may allow a privileged user to enable escalation of privilege via local access. Recommendations: For versions prior to 2.90, update to version 2.90 o...
PT-2023-13426 · Intel · Intel Nuc Pro Software Suite
Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to an uncontrolled search path in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privilege...
PT-2023-14891 · Intel · Intel(R) Retail Edge
Name of the Vulnerable Software and Affected Versions: IntelR Retail Edge android application versions prior to 3.0.301126-RELEASE Description: The issue is related to improper access control, which may allow an authenticated user to enable information disclosure via local access. Recommendations...
PT-2023-13512 · Facebook · Hhvm
Name of the Vulnerable Software and Affected Versions: HHVM versions 4.172.0 and all prior versions Description: The issue arises from HHVM using TLS 1.0 for secure connections when handling tls:// URLs in the stream extension. TLS 1.0 has numerous published vulnerabilities and is deprecated...
PT-2023-15424 · I Thirteen Web Solution · Mass Email To Users Plugin
Name of the Vulnerable Software and Affected Versions: I Thirteen Web Solution Mass Email To users plugin versions 1.1.4 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into a website,...
PT-2023-19200 · Christof Servit · Affiliate-Toolkit
Name of the Vulnerable Software and Affected Versions: Christof Servit affiliate-toolkit plugin versions prior to 3.3.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with editor or higher permissions. Recommendations: For Christof Servit...
PT-2023-12992 · Intel · Intel Vroc
Name of the Vulnerable Software and Affected Versions: IntelR VROC software versions prior to 7.7.6.1003 Description: The issue is related to a use after free condition in the IntelR VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local acces...
PT-2023-13536 · Intel · Intel Ipp Cryptography
Name of the Vulnerable Software and Affected Versions: IntelR IPP Cryptography software versions prior to 2021.6 Description: The issue is related to insufficient control flow management, which may allow an authenticated user to potentially enable information disclosure via local access...
DLA-3416-1 emacs - security update
Bulletin has no description...
PT-2023-7395 · Intel · Intel Trace Analyzer/Collector
Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector versions prior to 2021.8.0 Description: The issue is related to a buffer overflow in memory, which may allow an attacker to escalate their privileges. This can be achieved through local access by an...
Intel® EMA Software Advisory
Summary: A potential security vulnerability in the Intel® Endpoint Management Assistant EMA software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-45128 Description: Improper authorization in the...
Intel® DCM Advisory
Summary: Potential security vulnerabilities in the Intel® Data Center Manager DCM software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-40210 Description: Exposu...
PT-2023-15066 · WordPress · Woocommerce Jazzcash Gateway Plugin
Name of the Vulnerable Software and Affected Versions: WooCommerce JazzCash Gateway Plugin versions prior to 2.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...