2718 matches found
CVE-2022-27497
Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2022-27497
Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...
Cross site scripting
Out-of-bounds write in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2022-26047
Improper input validation for some IntelR PROSet/Wireless WiFi, Intel vProR CSME WiFi and KillerTM WiFi products may allow unauthenticated user to potentially enable denial of service via local access...
Session fixation
Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
UBUNTU-CVE-2022-28667
Out-of-bounds write for some IntelR PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
Authentication flaw
Improper authentication in the IntelR SDP Tool before version 3.0.0 may allow an unauthenticated user to potentially enable information disclosure via network access...
CVE-2022-28667
Out-of-bounds write for some IntelR PROSet/Wireless WiFi software before version 22.140 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2022-26513
Out-of-bounds write in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2022-26513
Out-of-bounds write in some IntelR XMMTM 7560 Modem software before version M27560R01.2146.00 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2022-29486
Improper buffer restrictions in the Hyperscan library maintained by IntelR all versions downloaded before 04/29/2022 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2022-33942
Protection mechanism failure in the IntelR DCM software before version 5.0 may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2022-27497
Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...
CVE-2022-27497
The CVE-2022-27497 issue is a null pointer dereference in Intel® AMT firmware prior to versions 11.8.93, 11.12.93, 11.22.93, 12.0.92, 14.1.67, 15.0.42, and 16.1.25 that may allow an unauthenticated remote attacker to cause a denial of service via network access. Public sources (Intel IPU advisory...
CVE-2022-27497
Null pointer dereference in firmware for IntelR AMT before version 11.8.93, 11.22.93, 11.12.93, 12.0.92, 14.1.67, 15.0.42, 16.1.25 may allow an unauthenticated user to potentially enable denial of service via network access...
OESA-2022-2056 three-eight-nine-ds-base security update
389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration. Security Fixes: When binding against a DN during authentication, the reply from 389-ds-base will be different whether the DN exists or not. This can be used by an...
PT-2022-6288 · Intel · Intel Proset/Wireless Wifi
Name of the Vulnerable Software and Affected Versions: IntelR PROSet/Wireless WiFi software versions prior to 22.140 Description: The issue is related to an out-of-bounds write in the IntelR PROSet/Wireless WiFi software, which may allow an unauthenticated user to potentially enable denial of...
CVE-2022-39328
Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patche...
CVE-2022-39328 Grafana vulnerable to race condition allowing privilege escalation
Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patche...