2020

A potential vulnerability in a dynamically loaded AMD driver in AMD VBIOS Flash Tool SDK may allow any authenticated use

An unrestricted file upload issue in FlexDotnetCMS before v1.5.9 allows an authenticated remote attacker to upload and e

Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenti

In Sentrifugo 3.2, admin can edit employee's informations via this endpoint --> /sentrifugo/index.php/empadditionaldetai

In Sentrifugo 3.2, users can share an announcement under "Organization -> Announcements" tab. Also, in this page, users

In Sentrifugo 3.2, users can upload an image under "Assets -> Add" tab. This "Upload Images" functionality is suffered f

Insecure inherited permissions in firmware update tool for some Intel(R) NUCs may allow an authenticated user to potenti

Incorrect default permissions in the Intel(R) Board ID Tool version v.1.01 may allow an authenticated user to potentiall

Improper Restriction of XML External Entity Reference in subsystem forIntel(R) Quartus(R) Prime Pro Edition before versi

In Arm software implementing the Armv8-M processors (all versions), the stack selection mechanism could be influenced by

Improper access control in the Intel(R) XTU before version 6.5.1.360 may allow an authenticated user to potentially enab

Improper input validation in the Intel(R) Data Center Manager Console before version 3.6.2 may allow an authenticated us

Improper permissions in the installer for the Intel(R) Battery Life Diagnostic Tool before version 1.0.7 may allow an au

Improper permissions in the installer for the Intel(R) Data Center Manager Console before version 3.6.2 may allow an aut

Insecure default variable initialization in firmware for some Intel(R) NUCs may allow an authenticated user to potential

Improper permissions in the installer for the Intel(R) Processor Identification Utility before version 6.4.0603 may allo

Improper permissions in the installer for the Intel(R) Advisor tools before version 2020 Update 2 may allow an authentic

Insufficiently protected credentials in the Intel(R) QAT for Linux before version 1.7.l.4.10.0 may allow an authenticate

Improper permissions in the installer for the Intel(R) HID Event Filter Driver, all versions, may allow an authenticated

Improper access controls in Intel Unite(R) Cloud Service client before version 4.2.12212 may allow an authenticated user

Improper permissions in the installer for the Intel(R) Falcon 8+ UAS AscTec Thermal Viewer, all versions, may allow an a

Uncontrolled search path in the Intel(R) VTune(TM) Profiler before version 2020 Update 1 may allow an authenticated user

Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an au

Protection mechanism failure in some Intel(R) Thunderbolt(TM) DCH drivers for Windows* before version 72 may allow an au

Uncontrolled search path in Intel(R) SCS Add-on for Microsoft* SCCM before version 2.1.10 may allow an authenticated use

Integer overflow in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 14.0.45 may allow a

Out-of-bounds read in subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and

Out-of-bounds read in DHCP subsystem for Intel(R) AMT, Intel(R) ISM versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70

Use after free in Kernel Mode Driver for Intel(R) TXE versions before 3.1.80 and 4.0.30 may allow an authenticated user

Out-of-bounds read in subsystem for Intel(R) AMT versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70 and 14.0.45 may al

Improper initialization in subsystem for Intel(R) CSME versions before12.0.70, 13.0.40, 13.30.10, 14.0.45 and 14.5.25, I

Use of potentially dangerous function in Intel BIOS platform sample code for some Intel(R) Processors may allow an authe

BAB TECHNOLOGIE GmbH eibPort V3 prior to 3.8.3 devices allow denial of service (Uncontrolled Resource Consumption) via r

Various components in Ivanti Endpoint Manager through 2020.1.1 rely on Windows search order when loading a (nonexistent)

Several services are accessing named pipes in Ivanti Endpoint Manager through 2020.1.1 with default or overly permissive

Incorrect default permissions in Windows(R) installer in Intel(R) AMT SDK versions before 14.0.0.1 may allow an authenti

Improper buffer restriction in some Intel(R) Wireless Bluetooth(R) products before version 21.110 may allow an unauthent

Protection mechanism failure in some Intel(R) PROSet/Wireless WiFi products before version 21.110 may allow an authentic

Improper permissions in some Intel(R) High Definition Audio drivers before version 9.21.00.4561 may allow an authenticat

Incorrect default permissions in the Intel(R) RealSense(TM) D400 Series Dynamic Calibration Tool before version 2.11, ma

Improper access control in Installer for Intel(R) DAL SDK before version 2.1 for Windows may allow an authenticated user

Use after free in DAL subsystem for Intel(R) CSME versions before 11.8.80, 11.12.80, 11.22.80, 12.0.70, 13.0.40, 13.30.1

Improper access control in Installer for Intel(R) CSME Driver for Windows versions before 11.8.80, 11.12.80, 11.22.80, 1

Improper input validation in BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially e

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attri

Improper file permissions in the installer for the Intel(R) Media SDK for Windows before version 2019 R1 may allow an au

It was found that python-rsa is vulnerable to Bleichenbacher timing attacks. An attacker can use this flaw via the RSA d

Cross Site Request Forgery vulnerability in the firewall ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0

Unquoted service executable path in McAfee Endpoint Security (ENS) prior to 10.7.0 November 2020 Update allows local use

u'Incorrect validation of ring context fetched from host memory can lead to memory overflow' in Snapdragon Compute, Snap