CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

DEBIAN-CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-22892

Uncontrolled resource consumption for some OpenVINO™ model server software maintained by IntelR before version 2024.4 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-22844

Improper access control for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2025-20076

CVE-2025-20076 affects Intel® Tiber™ Edge Platform Edge Orchestrator prior to version 24.11. The issue is improper access control that could allow an unauthenticated user to escalate privileges via adjacent access. Intel advisories and Red Hat/NVD entries confirm the affected product and general ...

CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20026

CVE-2025-20026 relates to an out-of-bounds read in Intel® PROSet/Wireless WiFi Software for Windows prior to version 23.100. The root cause is an out-of-bounds read that could allow an unauthenticated user to cause a denial of service via adjacent access. Documented affected products include vari...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20012

CVE-2025-20012 affects certain Intel Core Ultra processors and is due to an incorrect behavior order that could allow an unauthenticated user to disclose information with physical access. The connected advisories confirm this is addressed via an Intel microcode update (e.g., intel-microcode) and ...

CVE-2025-20012

Incorrect behavior order for some IntelR Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access...

CVE-2025-20006

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

PT-2025-21112 · Intel · Intel Tiber Edge Platform Edge Orchestrator

Name of the Vulnerable Software and Affected Versions: IntelR Tiber™ Edge Platform Edge Orchestrator software affected versions not specified Description: The issue is related to improper access control in the Edge Orchestrator software for IntelR Tiber™ Edge Platform. This may allow an...

CVE-2025-46739

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...

CVE-2025-46739 Improper Restriction of Excessive Authentication Attempts

An unauthenticated user could discover account credentials via a brute-force attack without rate limiting...

Intel® Core™ Ultra Processor Firmware Advisory

Summary: Potential security vulnerabilities for some Intel® Core™ Ultra processors may allow information disclosure. Intel is releasing microcode updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2025-24495 Description: Incorrect initialization of resource in...

WordPress Cool Author Box plugin <= 3.0.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nabil Irawan in WordPress Plugin Cool Author Box versions = 3.0.0...

PT-2025-19796 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions 3.5.0.beta4 before commit 82d84af6b0efbd9fa2aeec3e91ce7be1a768511b Description: A data leak issue affects Discourse, an open-source community platform, allowing some content on the site's homepage to be visible to...

CVE-2025-46349 YesWiki Vulnerable to Unauthenticated Reflected Cross-site Scripting

YesWiki is a wiki system written in PHP. Prior to version 4.5.4, YesWiki is vulnerable to reflected XSS in the file upload form. This vulnerability allows any malicious unauthenticated user to create a link that can be clicked on by the victim to perform arbitrary actions. This issue has been...