Sql injection

Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.php...

Sql injection

Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/viewproduct...

Sql injection

Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...

CVE-2023-5122

Grafana’s CSV Datasource Plugin is affected by an SSRF flaw when configured to send requests to a bare host (e.g., https://www.example.com/) with no path. A specially crafted user request could trigger requests to endpoints other than the administrator-configured one, enabling an SSRF vector. Pub...

CVE-2023-46186

CVE-2023-46186 affects IBM Jazz for Service Management 1.1.3.20. The root cause is improper access controls that enable an unauthorized user to obtain sensitive file information via forced browsing. Impact details from sources indicate a high confidentiality risk (NVD CVSS v3.1 base 7.5; IBM CNA ...

Design/Logic Flaw

Out-of-bounds read in some IntelR QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denial of service via local access...

Privilege escalation

Uncontrolled search path for some IntelR MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper input validation in some IntelR SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable information disclosure via local access...

Authorization

Improper authorization in some IntelR PM software may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper initialization in some IntelR MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access...

Design/Logic Flaw

Incorrect default permissions in some ACAT software maintained by IntelR before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path in some IntelR SDK for OpenCLTM Applications software may allow an authenticated user to potentially enable escalation of privilege via local access...

Default configuration

Incorrect default permissions in the IntelR SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of privilege via local access...

Privilege escalation

Uncontrolled search path element in some IntelR SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

Deserialization of untrusted data

Deserialization of untrusted data in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable a denial of service via local access...

Privilege escalation

Uncontrolled search path in some IntelR XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege via local access...

Privilege escalation

Insecure inherited permissions in some IntelR Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of privilege via local access...

Input validation

Improper initialization for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

Input validation

Improper input validation in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

Default configuration

Incorrect default permissions in some IntelR Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalation of privilege via local access...