Authentication flaw

Improper authentication in subsystem for IntelR AMT before versions 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow a privileged user to potentially enable escalation of privilege via local access...

Design/Logic Flaw

Out-of-bounds read in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

Improper access control

Improper access control in BIOS firmware for some IntelR NUCs before version INWHL357.0046 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Improper input validation in BIOS firmware for some IntelR NUC Boards, IntelR NUC Kits before version TY0070 may allow a privileged user to potentially enable escalation of privilege via local access...

Buffer overflow

Improper buffer restrictions in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

Cross site scripting

Cross-site scripting in the IntelR EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access...

Input validation

Incomplete cleanup in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2022-21198

CVE-2022-21198 is a TOCTOU race condition in the BIOS firmware of some Intel processors allowing escalation of privilege via local access. Affected are Intel BIOS/IPU firmware implementations referenced in Intel’s INTEL-SA-00688 advisory, with CVSS vectors indicating local attack, low to moderate...

CVE-2022-30542

Improper input validation in the firmware for some IntelR Server Board S2600WF, IntelR Server System R1000WF and IntelR Server System R2000WF families before version R02.01.0014 may allow a privileged user to potentially enable an escalation of privilege via local access...

CVE-2022-36370

Improper authentication in BIOS firmware for some IntelR NUC Boards and IntelR NUC Kits before version MYi30060 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-32569

Improper buffer restrictions in BIOS firmware for some IntelR NUC M15 Laptop Kits before version BCTGL357.0074 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-27639

Incomplete cleanup in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via adjacent access...

CVE-2022-26045

Improper buffer restrictions in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow a privileged user to potentially enable escalation of privilege via physical access...

CVE-2022-27499

Premature release of resource during expected lifetime in the IntelR SGX SDK software may allow a privileged user to potentially enable information disclosure via local access...

CVE-2022-30297

Cross-site scripting in the IntelR EMA software before version 1.8.0 may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2022-41906 OpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF)

OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via Email, Slack, Amazon Chime, Custom web-hook etc channels. A potential SSRF issue in OpenSearch Notifications Plugin starting in 2.0.0 and prior to 2.2.1 could allow an existing...

CVE-2022-41906 OpenSearch Notifications is vulnerable to Server-Side Request Forgery (SSRF)

OpenSearch Notifications is a notifications plugin for OpenSearch that enables other plugins to send notifications via Email, Slack, Amazon Chime, Custom web-hook etc channels. A potential SSRF issue in OpenSearch Notifications Plugin starting in 2.0.0 and prior to 2.2.1 could allow an existing...

Intel Server Board和Intel Server System 安全漏洞

Intel Server Board and Intel Server System are both products of Intel Corporation.Intel Server Board is a server motherboard.Intel Server System is a server array card. A security vulnerability exists in Intel Server Board and Intel Server System that stems from an uncaught exception in the...

PT-2022-18457 · Intel · Intel Sgx Sdk

Name of the Vulnerable Software and Affected Versions: IntelR SGX SDK software affected versions not specified Description: The issue is related to the premature release of a resource during its expected lifetime, which may allow a privileged user to potentially enable information disclosure via...

CVE-2021-0185

Improper input validation in the firmware for some IntelR Server Board M10JNP Family before version 7.216 may allow a privileged user to potentially enable an escalation of privilege via local access...