CVE-2023-50712 Improper Neutralization of Alternate XSS Syntax in iris-web

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations in versions prior to v2.3.7. The vulnerability may allow an attack...

Iris Security Breach

Iris is a fast, simple but fully featured and very efficient Go web framework. A security vulnerability exists in iris-web versions prior to v2.3.7, which stems from the presence of a stored cross-site scripting XSS vulnerability that could allow an attacker to inject malicious scripts into an...

PT-2023-31618 · Iris-Web · Iris-Web

Name of the Vulnerable Software and Affected Versions: iris-web versions prior to v2.3.7 Description: A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations. The vulnerability may allow an attacker to inject malicious scripts into the...

CVE-2023-28404

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-28401

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-25071

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

Null pointer dereference

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

Privilege escalation

Unquoted search path or element in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable escalation of privilege via local access...

Information disclosure

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

Cross site scripting

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticated user to potentially enable escalation of privilege via local access...

Cross site scripting

Out-of-bounds write in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access...

Null pointer dereference

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-28404

CVE-2023-28404 affects Intel Arc and Iris Xe Graphics - WHQL Windows drivers prior to 31.0.101.4255. The issue is an out-of-bounds read in the graphics driver that could allow an authenticated local user to disclose information. The vulnerability is documented across multiple feeds (NVD, Red Hat,...

CVE-2023-28404

Out-of-bounds read in the IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-25071

NULL pointer dereference in some IntelR ArcTM & IrisR Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to potentially enable denial of service via local access...

CVE-2023-25071

CVE-2023-25071 documents a NULL pointer dereference in Intel Graphics Drivers for Intel Arc™ & Iris™ Xe Graphics (WHQL) on Windows. Affects Windows drivers prior to version 31.0.101.4255; successful exploitation by an authenticated local user could enable a denial-of-service condition. Intel advi...

CVE-2023-28401

CVE-2023-28401 affects Intel Arc and Iris Xe Graphics WHQL Windows drivers prior to version 31.0.101.4255, with an out-of-bounds write that could enable local privilege escalation for authenticated users. The vulnerability is documented in multiple sources (NVD, Red Hat, Intel advisory) and speci...

CVE-2023-25952

CVE-2023-25952 : Out-of-bounds write in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software. Root cause: out-of-bounds write. Impact: local denial of service (no confidentiality/in...

CVE-2022-42879

Consolidated view for CVE-2022-42879: A NULL pointer dereference in Intel Arc Control software prior to version 1.73.5335.2 may allow an authenticated local user to cause a denial of service. Affected product: Intel Arc Control software (Windows). Root cause: NULL pointer dereference in the contr...

CVE-2023-29165

CVE-2023-29165 affects Intel Arc™ Control software before version 1.73.5335.2. The issue is an unquoted search path/element that may allow a locally authenticated user to escalate privileges. Red Hat and Intel advisories corroborate the vulnerability and list the affected product as Intel Arc Con...