Results
8,491 of 20,154· Page 102/170Observable timing discrepancy in Intel(R) IPP before version 2020 update 1 may allow authorized user to potentially enab
Improper initialization in the BMC firmware for some Intel(R) Server Boards, Server Systems and Compute Modules before v
Cross-site scripting (XSS) vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix
Out of bounds write in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08
Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable a
Race condition in a subsystem in the Intel(R) LMS versions before 2039.1.0.0 may allow a privileged user to potentially
Improper buffer restrictions in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 1
Improper input validation in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable
Race condition in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation
Modification of assumed-immutable data in subsystem in Intel(R) CSME versions before 13.0.47, 13.30.17, 14.1.53, 14.5.32
Protection mechanism failure in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable
Improper authentication in some Intel(R) RealSense(TM) IDs may allow an unauthenticated user to potentially enable escal
Domain-bypass transient execution vulnerability in some Intel Atom(R) Processors may allow an authenticated user to pote
Improper isolation of shared resources in some Intel(R) Processors may allow an authenticated user to potentially enable
Insufficient control flow management in subsystem in Intel(R) SPS versions before SPS_E3_05.01.04.300.0, SPS_SoC-A_05.00
Improper initialization in a subsystem in the Intel(R) CSME versions before 11.8.86, 11.12.86, 11.22.86, 12.0.81, 13.0.4
Out of bound read in a subsystem in the Intel(R) CSME versions before 12.0.81, 13.0.47, 13.30.17, 14.1.53 and 14.5.32 ma
Improper input validation in the firmware for some Intel(R) Processors may allow an authenticated user to potentially en
Insufficient control flow management in the firmware for some Intel(R) Processors may allow an unauthenticated user to p
Out of bounds write in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable denia
Improper initialization in the firmware for some Intel(R) Processors may allow a privileged user to potentially enable e
Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potent
Improper input validation in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially en
Insufficient control flow management in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to pot
Improper control of a resource through its lifetime in some Intel(R) Thunderbolt(TM) controllers may allow an authentica
Improper conditions check in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially en
Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potent
Improper access control in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enab
Out-of-bounds write in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially enable d
Protection mechanism failure in some Intel(R) Thunderbolt(TM) controllers may allow an authenticated user to potentially
The vulnerability could expose cleartext credentials from AVEVA InTouch Runtime 2020 R2 and all prior versions (WindowVi
Brocade Fabric OS prior to v9.0.1a and 8.2.3a and after v9.0.0 and 8.2.2d may observe high CPU load during security scan
Brocade SANnav before version 2.1.1 allows an authenticated attacker to list directories, and list files without permiss
Brocade SANNav before version 2.1.1 contains an information disclosure vulnerability. Successful exploitation of interna
The OVA version of Brocade SANnav before version 2.1.1 installation with IPv6 networking exposes the docker container po
A cross-site scripting (XSS) vulnerability in CloverDX Server 5.9.0, CloverDX 5.8.1, CloverDX 5.7.0, and earlier allows
An authenticated attacker with administrator rights Bosch IP cameras can call an URL with an invalid parameter that caus
When SAP Commerce Cloud version 100, hosts a JavaScript storefront, it is vulnerable to MIME sniffing, which, in certain
SAP NetWeaver Application Server ABAP (Applications based on SAP GUI for HTML), versions - KRNL64NUC - 7.49, KRNL64UC -
SAP NetWeaver Application Server ABAP (Applications based on Web Dynpro ABAP), versions - SAP_UI - 750,752,753,754,755,
SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL
Under certain conditions, the installation of SAP Business One, version - 10.0, discloses sensitive information on the f
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated FLI file received from untrusted sources
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources
Improper Neutralization of Input in the ePO administrator extension for McAfee Data Loss Prevention (DLP) Endpoint for W
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated TIF file received from untrusted sources
Test your stack for 2021issues
CyberStrike tests your own apps and APIs, then verifies each finding before you see it.