Input validation

Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access...

Improper access control

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access...

Design/Logic Flaw

Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

Improper access control

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access...

Improper access control

Improper access control in user mode driver for some IntelR Connectivity Performance Suite before version 2.1123.214.2 may allow unauthenticated user to potentially enable information disclosure via network access...

CVE-2023-31273

Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access...

CVE-2023-22285

Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access...

PT-2023-7388 · Intel · Intel Connectivity Performance Suite

Name of the Vulnerable Software and Affected Versions: Intel Connectivity Performance Suite versions prior to 2.1123.214.2 Description: The issue is related to improper access control in the user mode driver for Intel Connectivity Performance Suite, which may allow an unauthenticated user to...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client that stems from the presence of a buffer overflow issue. It could allow an unauthenticated user to perform a denial of service via network access...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23047)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an...

PT-2023-21681 · Intel · Intel E810 Ethernet Controllers/Adapters

Name of the Vulnerable Software and Affected Versions: IntelR E810 Ethernet Controllers and Adapters versions prior to 1.7.1 Description: The issue is related to an out-of-bounds read in the firmware, which may allow an unauthenticated user to potentially enable denial of service via adjacent...

Zoom Client for Meetings < 5.15.10 Vulnerability (ZSB-23048)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.15.10. It is, therefore, affected by a vulnerability as referenced in the ZSB-23048 advisory. - Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network...

Zoom client security vulnerability

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom client that stems from the presence of a buffer overflow issue. It could allow an unauthenticated user to perform a denial of service via network access...

hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi

An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access...

CVE-2023-38547

The CVE-2023-38547 issue affects Veeam ONE (versions 11, 11a, 12), where an unauthenticated user can access information about the SQL Server connection to the Veeam ONE configuration database, potentially enabling remote code execution on the SQL server. Mitigation is via the vendor hotfix descri...

Fedora 39 : linux-firmware (2023-dd3ebcea25)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-dd3ebcea25 advisory. Update to upstream 20230919 release: amd-ucode: Add note on fam19h warnings i915: update MTL HuC to version 8.5.4 amdgpu: update DMCUB to 0.0.183.0...

Seraphinite Accelerator < 2.20.32 - Unauthorised Settings Reset/Import

Description The plugin does not have authorisation and CSRF checks when resetting and importing its settings, allowing unauthenticated users to reset them The issue was partially fixed in 2.20.29 only adding authorisation checks. CSRF checks were added in 2.20.32 As an unauthenticated user, open...

Remote file inclusion

A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion LFI via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the...

CVE-2023-4591 Inclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack

A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion LFI via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the...

CVE-2023-4591 Inclusion of Functionality from Untrusted Control Sphere in WPN-XM Serverstack

A local file inclusion vulnerability has been found in WPN-XM Serverstack affecting version 0.8.6, which would allow an unauthenticated user to perform a local file inclusion LFI via the /tools/webinterface/index.php?page parameter by sending a GET request. This vulnerability could lead to the...