Alibaba Cloud Linux 3 : 0082: linux-firmware (ALINUX3-SA-2021:0082)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2021:0082 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2020-12321: Improper buffer restriction in some...

PT-2025-21228 · Kingsoft · Wps Office

Name of the Vulnerable Software and Affected Versions: WPS Office versions prior to 19302 Description: The issue allows a local attacker to obtain sensitive information via a crafted file. Recommendations: For versions prior to 19302, update to version 19302 or later to resolve the issue...

PT-2025-21197 · Drupal · Enterprise Mfa - Tfa For Drupal

Name of the Vulnerable Software and Affected Versions: Enterprise MFA - TFA for Drupal versions 0.0.0 through 4.6.x Enterprise MFA - TFA for Drupal versions 5.0.0 through 5.1.x Description: The issue is related to a Missing Authorization vulnerability in Enterprise MFA - TFA for Drupal, which...

PT-2025-21190 · Unknown · Oembed Providers

Name of the Vulnerable Software and Affected Versions: oEmbed Providers versions 0.0.0 through 2.2.1 Description: The issue affects oEmbed Providers, allowing Cross-Site Scripting XSS due to improper neutralization of input during web page generation. Recommendations: For versions 0.0.0 through...

The vulnerability of Elber Communications Equipment’s software products lies in their ability to bypass the authentication process by using an alternative path or channel. This allows attackers to circumvent the authentication procedures.

The vulnerability of Elber Communications Equipment’ software products relates to bypassing the authentication process by using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent the authentication process and re-register user credentials...

PT-2025-21196 · Drupal · Enterprise Mfa - Tfa For Drupal

Name of the Vulnerable Software and Affected Versions: Enterprise MFA - TFA for Drupal versions 0.0.0 through 4.6.x Enterprise MFA - TFA for Drupal versions 5.0.0 through 5.1.x Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions. This issue may...

One Time Password - Moderately critical - Access bypass - SA-CONTRIB-2025-063

This module enables you to allow users to include a second authentication method in addition to password authentication. The module doesn't sufficiently prevent the same TFA token within a 30 second window. This vulnerability is mitigated by the fact that an attacker must obtain a valid...

Piwik PRO - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-058

This module enables you to add the Piwik Pro web statistics tracking system to your website. The module does not check the JS code that is loaded on the website. So a user with the "Administer Piwik Pro" permission could configure the module to load JS from a malicious website. This vulnerability...

PT-2025-21189 · Unknown · Restrict Route By Ip

Name of the Vulnerable Software and Affected Versions: Restrict route by IP versions 0.0.0 through 1.2.x Restrict route by IP version 1.3.0 is not affected, so the correct range is: Restrict route by IP versions 0.0.0 through 1.2.x Description: A Cross-Site Request Forgery CSRF issue affects the...

CVE-2025-20079

Uncontrolled search path for some IntelR Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20046

Use after free for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2025-20026

Out-of-bounds read for some IntelR PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access...

CVE-2024-45371

Improper access control for some IntelR Arc™ & IrisR Xe graphics software before version 32.0.101.6077 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2024-47795

CVE-2024-47795 affects Intel® oneAPI DPC++/C++ Compiler (and FPGA Support Package for Windows) prior to 2025.0.0. The vulnerability is an uncontrolled search path that could enable local privilege escalation when an authenticated user gains local access. The issue is supported by multiple feeds (...

CVE-2024-46895

CVE-2024-46895 concerns Intel graphics software (Arc and Iris Xe). The vulnerability is an uncontrolled search path in Intel® Arc™ & Iris® Xe graphics software before version 32.0.101.6083/32.0.101.5736, which may allow an authenticated user to escalate privileges via local access. The issue is r...

CVE-2024-43101

Improper access control for some IntelR Data Center GPU Flex Series for Windows driver software before version 31.0.101.4255 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-22843

Incorrect execution-assigned permissions for some Edge Orchestrator software for IntelR Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20095

Incorrect Default Permissions for some IntelR RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

Uncontrolled search path element for some IntelR Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20015

CVE-2025-20015 affects Intel® Ethernet Connections Boot Utility before version 29.4. The vulnerability is an uncontrolled search path element that could allow an authenticated, local user to escalate privileges. Intel’s advisory INTEL-SA-01294 describes vulnerable versions prior to 29.4 and recom...