CVE-2023-30615

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

CVE-2023-30615 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

CVE-2023-30615

CVE-2023-30615 (iris-web) is a stored XSS vulnerability affecting iris-web before version 2.2.1. The issue allows an authenticated attacker to inject malicious scripts that run when users visit affected locations, with potential for unauthorized access and data theft. The patch is available in ir...

CVE-2023-30615 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in iris-web

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. A stored Cross-Site Scripting XSS vulnerability has been identified in iris-web, affecting multiple locations . The vulnerability in allows an attacker to inject malicious...

Iris 跨站脚本漏洞

Iris is a fast, simple, yet full-featured and very efficient Go web framework. A security vulnerability exists in Iris versions prior to 2.2.1, which stems from the presence of a stored cross-site scripting XSS vulnerability that allows an attacker to inject malicious script into an application,...

Malicious Package

Overview iris-node-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

CVE-2022-34849

Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-34849

Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...

Design/Logic Flaw

Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...

Information disclosure

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-34849

Uncaught exception in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1436v2 may allow a privileged user to potentially enable denial of service via local access...

CVE-2022-34849

Intel Iris Xe MAX drivers for Windows are affected by CVE-2022-34849 due to an uncaught exception in versions prior to 100.0.5.1436(v2), which may allow a privileged local attacker to cause a denial of service. Affected software is the Intel Iris Xe MAX drivers for Windows before 100.0.5.1436(v2)...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30531

Out-of-bounds read in the IntelR IrisR Xe MAX drivers for Windows before version 100.0.5.1474 may allow a privileged user to potentially enable information disclosure via local access...

PT-2023-13011 · Intel · Intel Iris Xe Max Drivers

Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1474 Description: The issue is an out-of-bounds read that may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versio...

Intel Iris Xe 安全漏洞

Intel Iris Xe is a display chip integrated inside the central processor from Intel Corporation USA. A security vulnerability exists in Intel Iris Xe MAX drivers versions prior to 100.0.5.1436 v2. An attacker could exploit this vulnerability to cause a denial of service on the system...

PT-2023-13427 · Intel · Intel Iris Xe Max Drivers

Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1436v2 Description: The issue is related to an uncaught exception in the IntelR IrisR Xe MAX drivers for Windows, which may allow a privileged user to potentially enable denial...

Intel Iris Xe 缓冲区错误漏洞

Intel Iris Xe is a display chip integrated inside the central processor from Intel Corporation USA. A security vulnerability exists in Intel Iris Xe MAX drivers prior to version 100.0.5.1474, which originates from a driver out-of-bounds read. An attacker could exploit the vulnerability to cause...