12612 matches found
PT-2023-13426 · Intel · Intel Nuc Pro Software Suite
Name of the Vulnerable Software and Affected Versions: IntelR NUC Pro Software Suite versions prior to 2.0.0.3 Description: The issue is related to an uncontrolled search path in the IntelR NUC Pro Software Suite, which may allow an authenticated user to potentially enable escalation of privilege...
PT-2023-18610 · Intel · Intel Server Board Bmc Firmware
Name of the Vulnerable Software and Affected Versions: IntelR Server Board BMC firmware versions prior to 2.90 Description: A buffer overflow issue may allow a privileged user to enable escalation of privilege via local access. Recommendations: For versions prior to 2.90, update to version 2.90 o...
PT-2023-19200 · Christof Servit · Affiliate-Toolkit
Name of the Vulnerable Software and Affected Versions: Christof Servit affiliate-toolkit plugin versions prior to 3.3.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with editor or higher permissions. Recommendations: For Christof Servit...
DLA-3416-1 emacs - security update
Bulletin has no description...
PT-2023-7395 · Intel · Intel Trace Analyzer/Collector
Name of the Vulnerable Software and Affected Versions: IntelR Trace Analyzer and Collector versions prior to 2021.8.0 Description: The issue is related to a buffer overflow in memory, which may allow an attacker to escalate their privileges. This can be achieved through local access by an...
Intel® EMA Software Advisory
Summary: A potential security vulnerability in the Intel® Endpoint Management Assistant EMA software may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-45128 Description: Improper authorization in the...
Intel® DCM Advisory
Summary: Potential security vulnerabilities in the Intel® Data Center Manager DCM software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-40210 Description: Exposu...
PT-2025-18625 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A memory leak has been identified in the Linux kernel's Bluetooth L2CAP implementation. The issue arises when the HCI core processes ACL data packets without freeing the skb,...
PT-2023-15066 · WordPress · Woocommerce Jazzcash Gateway Plugin
Name of the Vulnerable Software and Affected Versions: WooCommerce JazzCash Gateway Plugin versions prior to 2.1 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...
PT-2023-19208 · Eightweb · Eightweb Interactive Read More Without Refresh Plugin
Name of the Vulnerable Software and Affected Versions: Eightweb Interactive Read More Without Refresh plugin versions = 3.1 Description: The issue is related to an Authenticated Stored Cross-Site Scripting XSS vulnerability. This means that an attacker with admin privileges can inject malicious...
Intel® VROC Advisory
Summary: Potential security vulnerabilities in the Intel® Virtual RAID on CPU VROC software may allow escalation of privilege or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-29919 Description: Use after...
Intel® NUC BIOS Update Software Advisory
Summary: A potential security vulnerability in some Intel® NUC Chaco Canyon BIOS update software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2022-38101 Description: Uncontrolled search path in...
Open CAS Advisory
Summary: A potential security vulnerability in the Open Cache Acceleration Software CAS for Linux maintained by Intel may allow information disclosure. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-22447 Description: Insertion...
CVE-2022-32885
A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing maliciously crafted web content may lead to arbitrary code execution...
PT-2023-21604 · Corefortress · Corefortress Easy Event Calendar Plugin
Name of the Vulnerable Software and Affected Versions: CoreFortress Easy Event calendar plugin versions prior to 1.0 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin+ privileges. Recommendations: For versions prior to 1.0...
PT-2023-15315 · Rocket Apps · Rocket Apps Open Graphite Plugin
Name of the Vulnerable Software and Affected Versions: Rocket Apps Open Graphite plugin versions = 1.6.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing...
JVN#01937209: LINE WORKS Drive Explorer vulnerable to code injection
LINE WORKS Drive Explorer provided by WORKS MOBILE Japan Corp. contains a code injection vulnerability CWE-94. Impact An attacker who can login to the client where the affected product is installed may inject arbitrary code while processing the product execution. Since a full disk access privileg...
PT-2023-17932 · WordPress · Nex-Forms
Name of the Vulnerable Software and Affected Versions: NEX-Forms WordPress plugin versions prior to 8.4 Description: The issue arises from improper escaping of the table parameter, which is populated with user input, before it is concatenated to an SQL query. Recommendations: For versions prior t...
PT-2023-12116 · Mblog · Mblog
Name of the Vulnerable Software and Affected Versions: mblog version 3.5.0 Description: The issue allows attackers to execute arbitrary code via a crafted theme when it gets selected. This is due to an OS Command injection vulnerability. Recommendations: For mblog version 3.5.0, update to a newer...