12616 matches found
PT-2023-13016 · Intel · Intel(R) Sur
Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to an improper conditions check in the software, which may allow an unauthenticated user to potentially enable denial of service via network access...
PT-2023-13330 · Intel · Intel Sur
Name of the Vulnerable Software and Affected Versions: IntelR SUR software versions prior to 2.4.8902 Description: The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable escalation of privilege via network access. Recommendations: For...
PT-2023-13011 · Intel · Intel Iris Xe Max Drivers
Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1474 Description: The issue is an out-of-bounds read that may allow a privileged user to potentially enable information disclosure via local access. Recommendations: For versio...
PT-2023-13998 · Intel · Intel(R) On Event Series Android Application
Name of the Vulnerable Software and Affected Versions: IntelR ON Event Series Android application versions prior to 2.0 Description: The issue is related to insufficiently protected credentials, which may allow an authenticated user to potentially enable information disclosure via local access...
PT-2023-13427 · Intel · Intel Iris Xe Max Drivers
Name of the Vulnerable Software and Affected Versions: IntelR IrisR Xe MAX drivers for Windows versions prior to 100.0.5.1436v2 Description: The issue is related to an uncaught exception in the IntelR IrisR Xe MAX drivers for Windows, which may allow a privileged user to potentially enable denial...
PT-2023-12900 · Cvat · Cvat
Name of the Vulnerable Software and Affected Versions: CVAT versions prior to 2.0.1 Description: The issue allows an authenticated user to potentially enable information disclosure via network access due to server-side request forgery. Recommendations: For versions prior to 2.0.1, update to versi...
PT-2023-13532 · Intel · Intel Qat Drivers For Windows
Name of the Vulnerable Software and Affected Versions: IntelR QAT drivers for Windows versions prior to 1.6 Description: The issue is related to an uncontrolled search path in some IntelR QAT drivers for Windows, which may allow an authenticated user to potentially enable escalation of privilege...
PT-2023-1500 · Fortinet · Fortiweb
Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.3.6 through 6.3.18 FortiWeb versions 6.4 FortiWeb versions 7.0.0 through 7.0.1 Description: The issue is related to a relative path traversal vulnerability in FortiWeb, which may allow an authenticated attacker to obtain...
PT-2023-3053 · Fortinet · Fortiweb
Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.0.0 through 7.0.3 Description: The issue is related to a double free in the software, which may allow an attacker to execute unauthorized code or commands via specially crafted commands. This can potentially enable an...
PT-2023-12922 · Palantir · Palantir Gotham
Name of the Vulnerable Software and Affected Versions: Palantir Gotham versions prior to 3.22.11.2 Description: The issue concerns an unauthenticated endpoint that could allow an attacker to exhaust the memory of the Gotham dispatch service. Recommendations: For versions prior to 3.22.11.2, updat...
PT-2023-13487 · Intel · Intel Battery Life Diagnostic Tool
Name of the Vulnerable Software and Affected Versions: IntelR Battery Life Diagnostic Tool versions prior to 2.2.0 Description: The issue is related to an uncontrolled search path in the IntelR Battery Life Diagnostic Tool software. This may allow an authenticated user to potentially enable...
SUSE CVE-2017-5462
A flaw in DRBG number generation within the Network Security Services NSS library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerabili...
Apple Security Update: macOS Big Sur 11.7.4
Apple recommends to install security update macOS Big Sur 11.7.4 on devices macOS Big Sur...
B&R Systems Diagnostics Manager Cross Site Scripting
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple XSS Vulnerabilities product: B&R Systems Diagnostics Manager vulnerable version: =3.00 and =D4.93 CVE number: CVE-2022-4286 impact: medium homepage:...
MGASA-2023-0046 Updated libzen packages fix security vulnerability
A vulnerability classified as problematic has been found in MediaArea ZenLib up to 0.4.38. This affects the function Ztring::DateFromSeconds1970Local of the file Source/ZenLib/Ztring.cpp. The manipulation of the argument Value leads to unchecked return value to null pointer dereference...
SUSE-SU-2023:0413-1 Security update for haproxy
This update for haproxy fixes the following issues: - CVE-2023-25725: Fixed a serious vulnerability in the HTTP/1 parser bsc1208132. - CVE-2023-0056: Fixed denial of service via crash in httpwaitforresponse bsc1207181...
Improper restriction of XML external entity reference (XXE) vulnerability in tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools
Overview tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools provided by FUJITSU LIMITED contain an improper restriction of XML external entity reference XXE vulnerability CWE-611. Toyama Taku and Sakaki Ryutaro of NEC Corporation reported this vulnerability to IPA. JPCERT/CC...
End of support for Office 2016 and Office 2019
None None...
