9517 matches found
CVE-2024-40887
Race condition in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2024-38310
Improper access control in some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-24852
creationtimestamp| type| source ---|---|--- 2025-02-12 22:13:09+00:00| seen| https://infosec.exchange/users/cve/statuses/113993212798309683 2025-02-12 22:16:36+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhz77r6ipv2a 2025-08-26 13:26:33+00:00| seen|...
CVE-2025-21695
In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-uart-backlight: fix serdev race The delluartblserdevprobe function calls devmserdevdeviceopen before setting the client ops via serdevdevicesetclientops. This ordering can trigger a NULL pointer dereference in...
CVE-2025-21696
In the Linux kernel, the following vulnerability has been resolved: mm: clear uffd-wp PTE/PMD state on mremap When mremaping a memory region previously registered with userfaultfd as write-protected but without UFFDFEATUREEVENTREMAP, an inconsistency in flag clearing leads to a mismatch between t...
CVE-2024-36293
CVE-2024-36293 concerns Intel SGX with improper access control in the EDECCSSA user leaf function, potentially enabling denial of service via local access by an authenticated user. Connected sources confirm the issue affects Intel processors and is addressed through microcode updates. Debian LTS ...
CVE-2024-36293
Improper access control in the EDECCSSA user leaf function for some IntelR Processors with IntelR SGX may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-39356
NULL pointer dereference in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2024-24582
Improper input validation in XmlCli feature for UEFI firmware for some IntelR processors may allow privileged user to potentially enable escalation of privilege via local access...
CVE-2023-34440
Improper input validation in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2024-30211
Improper access control in some IntelR ME driver pack installer engines before version 2422.6.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-38307
Improper input validation in the firmware for some IntelR AMT and IntelR Standard Manageability may allow an authenticated user to potentially enable denial of service via network access...
CVE-2024-21830
Uncontrolled search path in some IntelR VPL software before version 2023.4.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2024-41934
CVE-2024-41934 affects Intel® GPA software and Intel® GPA Framework prior to version 2024.3, with an improper access control vulnerability that may allow an authenticated local attacker to cause a denial of service. Multiple sources (Intel advisory, Red Hat CVE page, PT-security entry) confirm th...
CVE-2025-0108 PAN-OS: Authentication Bypass in the Management Web Interface
An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PH...
CVE-2025-1215
A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is abl...
CVE-2025-25343
creationtimestamp| type| source ---|---|--- 2025-02-12 18:41:40+00:00| seen| https://infosec.exchange/users/cve/statuses/113992381212711969 2025-02-12 19:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyv4sonws2h 2025-02-12 22:19:49+00:00| seen|...
CVE-2025-25205 Remote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matching
Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings lik...
CVE-2025-25199
creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187510032617 2025-02-12 18:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrrbreq52s 2025-02-12 20:14:01+00:00| seen|...
CVE-2025-25198
creationtimestamp| type| source ---|---|--- 2025-02-12 17:52:24+00:00| seen| https://infosec.exchange/users/cve/statuses/113992187494675681 2025-02-12 18:15:49+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyrr7c7jn2s 2025-02-12 20:14:00+00:00| seen|...