6021 matches found
CVE-2021-29891
Summary: IBM OPENBMC OP910 and OP940 are affected by CVE-2021-29891, where a privileged user could upload an improper site identity certificate, potentially causing loss of network services. The IBM bulletin confirms CVSS v3.0/3.1 base scores around 4.5–4.9 (MEDIUM) with network attack vector and...
CVE-2022-25810
The Transposh WordPress Translation WordPress plugin through 1.0.8 exposes a couple of sensitive actions such has “tpreset” under the Utilities tab /wp-admin/admin.php?page=tputils, which can be used/executed as the lowest-privileged user. Basically all Utilities functionalities are vulnerable th...
IBM OPENBMC OP910和OP940 代码问题漏洞
IBM OPENBMC is a simulator from International Business Machines Corporation IBM. IBM OPENBMC versions OP910 and OP940 have a denial-of-service vulnerability that stems from allowing privileged users to upload the wrong site ID book, which could be exploited by an attacker to cause them to lose...
CVE-2021-29891
IBM OPENBMC OP910 and OP940 could allow a privileged user to upload an improper site identity certificate that may cause it to lose network services. IBM X-Force ID: 207221...
Input validation
Improper initialization in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable an escalation of privilege via local access...
Information disclosure
Insufficiently protected credentials for IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable information disclosure via local access...
Input validation
Improper initialization in the firmware for some IntelR NUC Laptop Kits before version BC0076 may allow a privileged user to potentially enable escalation of privilege via physical access...
CVE-2022-21181
Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...
ALPINE-CVE-2022-21233
Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-21240
Out of bounds read for some IntelR PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-21233
Improper isolation of shared resources in some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-21181
Improper input validation for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2021-33128
Improper access control in the firmware for some IntelR E810 Ethernet Controllers before version 1.6.0.6 may allow a privileged user to potentially enable denial of service via local access...
CVE-2022-21140
Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable information disclosure via local access...
Cross site scripting
Out of bounds read for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable denial of service via local access...
Improper access control
Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi products may allow a privileged user to potentially enable information disclosure via local access...
Information disclosure
Out of bounds read for some IntelR PROSet/Wireless WiFi products may allow a privileged user to potentially enable information disclosure via local access...
CVE-2022-34345
CVE-2022-34345 affects Intel® NUC Laptop Kits firmware prior to version BC0076, where improper input validation may allow a privileged user to escalate privileges via physical/local access. The vulnerability impact, as stated, is a high level of confidentiality/ integrity/ availability risk (C/H ...
