2710 matches found
CVE-2020-12338
Insufficient control flow management in the Open WebRTC Toolkit before version 4.3.1 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2020-12315
Path traversal in the IntelR EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
Xxe
Improper Restriction of XML External Entity Reference in subsystem forIntelR QuartusR Prime Pro Edition before version 20.3 and IntelR QuartusR Prime Standard Edition before version 20.2 may allow unauthenticated user to potentially enable information disclosure via network access...
CVE-2020-8753
Out-of-bounds read in DHCP subsystem for IntelR AMT, IntelR ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2020-12314
Improper input validation in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Design/Logic Flaw
Out-of-bounds read in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
Authentication flaw
Authentication bypass by capture-replay in RPMB protocol message authentication subsystem in IntelR TXE versions before 4.0.30 may allow an unauthenticated user to potentially enable escalation of privilege via physical access...
Input validation
Improper input validation in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2020-12319
Removed by vendor...
CVE-2020-12317
Improper buffer restriction in some IntelR PROSet/Wireless WiFi products before version 21.110 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2020-12317
Removed by vendor...
CVE-2020-8749
Out-of-bounds read in subsystem for IntelR AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2020-27481
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...
CVE-2020-27481
An unauthenticated SQL Injection vulnerability in Good Layers LMS Plugin = 2.1.4 exists due to the usage of "wpajaxnopriv" call in WordPress, which allows any unauthenticated user to get access to the function "gdlrlmscancelbooking" where POST Parameter "id" was sent straight into SQL query witho...
Ultimate Reviews < 2.1.33 - Unauthenticated PHP Object Injection
There were three occurrences in the plugin where an unauthenticated user could inject a serialized PHP object via a cookie, which could potentially lead to a PHP object injection vulnerability...
PT-2020-4740 · Intel · Intel Amt
Name of the Vulnerable Software and Affected Versions: IntelR AMT versions prior to 11.8.80 IntelR AMT versions prior to 11.12.80 IntelR AMT versions prior to 11.22.80 IntelR AMT versions prior to 12.0.70 IntelR AMT versions prior to 14.0.45 Description: The issue is related to an out-of-bounds...
CVE-2020-15952
Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally, unauthenticated attackers can phish unauthenticated Immuta users to steal credentials or force actions on authenticated users through reflected, DOM-based...
CVE-2020-15952
CVE-2020-15952 affects Immuta v2.8.2. The reports describe a stored XSS that enables a low-privileged user to escalate to administrative permissions, and additional risks where unauthenticated attackers can phish Immuta users to steal credentials or perform actions on behalf of authenticated user...
