CVE-2023-32280

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

CVE-2023-26591

CVE-2023-26591 concerns Intel Thunderbolt™ DCH drivers for Windows prior to version 88, where an unchecked return value in the driver code may allow an unauthenticated user with physical access to cause a denial of service. Affected product: Intel Thunderbolt DCH driver for Windows before 88. Rem...

CVE-2024-24691

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access...

Intel SUR Security Vulnerability

Intel SUR is a Software Asset Manager software from Intel Corporation USA. A security vulnerability exists in Intel SUR prior to version 2.4.10587, which stems from an improper access control issue that could cause an unauthenticated user to enable a denial of service via adjacent access...

Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software Security Vulnerabilities

Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software are both wireless network card drivers from Intel Corporation. A security vulnerability exists in Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software versions prior to 22.240, which stems from an improper access...

Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software Security Vulnerabilities

Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software are both wireless network card drivers from Intel Corporation. A security vulnerability previously existed in Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software version 22.240, which stemmed from an uncaught...

Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software Security Vulnerabilities

Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software are both wireless network card drivers from Intel Corporation. A security vulnerability exists in Intel PROSet/Wireless WiFi Software and Intel Killer WiFi Software versions prior to 22.240, which stems from a protection mechanism...

PT-2024-2737 · Intel · Intel Killer Wi-Fi +1

Name of the Vulnerable Software and Affected Versions: Intel PROSet/Wireless and Intel Killer Wi-Fi software versions prior to 22.240 Description: The issue is related to improper initialization in some Intel PROSet/Wireless and Intel Killer Wi-Fi software, which may allow an unauthenticated user...

PT-2024-1880 · Intel · Intel(R) Sur

Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.10587 Description: The issue is related to improper access control in IntelR SUR software, which may allow an unauthenticated user to potentially enable denial of service via adjacent access. This cou...

Exploit for Missing Authentication for Critical Function in F5 Big-Ip_Access_Policy_Manager

CVE-2023-46747 Exploit Script This script exploits the F5 B...

CVE-2023-46687

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer...

CVE-2023-46687 Emerson Rosemount GC370XA, GC700XA, GC1500XA Command Injection

In Emerson Rosemount GC370XA, GC700XA, and GC1500XA products, an unauthenticated user with network access could execute arbitrary commands in root context from a remote computer...

DEBIAN-CVE-2023-6535

A flaw was found in the Linux kernel's NVMe driver. This issue may allow an unauthenticated malicious actor to send a set of crafted TCP packages when using NVMe over TCP, leading the NVMe driver to a NULL pointer dereference in the NVMe driver, causing kernel panic and a denial of service...

PT-2024-1549 · Cisco · Cisco Telepresence Video Communication Server +1

Name of the Vulnerable Software and Affected Versions: Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS affected versions not specified Description: The issue is related to cross-site request forgery CSRF attacks, which could allow an unauthenticated, remote attacker ...

CVE-2023-50166

Pega Platform versions 8.5.4–8.8.3 are affected by an input validation XSS vulnerability triggered by a redirect parameter, exploitable by an unauthenticated user. Affected component/area: Pega Platform runtime handling of redirect parameters. Reported impact is cross-site scripting with potentia...

CVE-2023-50166

Pega Platform from 8.5.4 to 8.8.3 is affected by an XSS issue with an unauthenticated user and the redirect parameter...

CVE-2023-4550 Unauthenticated Arbitrary File Read

Improper Input Validation, Files or Directories Accessible to External Parties vulnerability in OpenText AppBuilder on Windows, Linux allows Probe System Files. An unauthenticated or authenticated user can abuse a page of AppBuilder to read arbitrary files on the server on which it is hosted. Thi...

GHSA-PGPJ-V85Q-H5FM Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation

Summary The pyload API allows any API call to be made using GET requests. Since the session cookie is not set to SameSite: strict, this opens the library up to severe attack possibilities via a Cross-Site Request Forgery CSRF attack. This proof of concept shows how an unauthenticated user could...

CVE-2023-31274

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...

Race condition

AVEVA PI Server versions 2023 and 2018 SP3 P05 and prior contain a vulnerability that could allow an unauthenticated user to cause the PI Message Subsystem of a PI Server to consume available memory resulting in throttled processing of new PI Data Archive events and a partial denial-of-service...