2022

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a

A bug exist in the input parameter of Access Manager that allows supply of invalid character to trigger cross-site scrip

Phpok v6.1 was discovered to contain a deserialization vulnerability via the update_f() function in login_control.php. T

A malicious or compromised UApp or ABL may be used by an attacker to send a malformed system call to the bootloader, res

An attacker, who gained elevated privileges via some other vulnerability, may be able to read data from Boot ROM resulti

A malicious or compromised UApp or ABL may be used by an attacker to issue a malformed system call which results in mapp

A malicious or compromised User Application (UApp) or AGESA Boot Loader (ABL) could be used by an attacker to exfiltrate

Insufficient DRAM address validation in System Management Unit (SMU) may result in a DMA (Direct Memory Access) read/wri

A hard-coded password vulnerability exists in the console infactory functionality of InHand Networks InRouter302 V3.5.37

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ

Multiple improper input validation vulnerabilities exists in the libnvram.so nvram_import functionality of InHand Networ

An OS command injection vulnerability exists in the console infactory_net functionality of InHand Networks InRouter302 V

A firmware update vulnerability exists in the iburn firmware checks functionality of InHand Networks InRouter302 V3.5.37

An OS command injection vulnerability exists in the console infactory_port functionality of InHand Networks InRouter302

An OS command injection vulnerability exists in the httpd wlscan_ASP functionality of InHand Networks InRouter302 V3.5.4

An OS command injection vulnerability exists in the console infactory_wlan functionality of InHand Networks InRouter302

An OS command injection vulnerability exists in the daretools binary functionality of InHand Networks InRouter302 V3.5.4

An information disclosure vulnerability exists in the router configuration export functionality of InHand Networks InRou

An OS command injection vulnerability exists in the console factory functionality of InHand Networks InRouter302 V3.5.4.

A stack-based buffer overflow vulnerability exists in the console factory functionality of InHand Networks InRouter302 V

A command execution vulnerability exists in the console inhand functionality of InHand Networks InRouter302 V3.5.4. A sp

An information disclosure vulnerability exists in the web interface session cookie functionality of InHand Networks InRo

A buffer overflow vulnerability exists in the httpd parse_ping_result API functionality of InHand Networks InRouter302 V

Improper input validation in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalatio

Improper buffer restrictions in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escala

Uncontrolled search path in the Intel(R) XTU software before version 7.3.0.33 may allow an authenticated user to potenti

A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A special

A cross-site scripting (xss) vulnerability exists in the info.jsp functionality of InHand Networks InRouter302 V3.5.4. A

Improper buffer access in firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation o

A privilege escalation vulnerability exists in the router configuration import functionality of InHand Networks InRouter

Processor optimization removal or modification of security-critical code for some Intel(R) Processors may allow an authe

An out of bounds read vulnerability exists in the malware scan functionality of ESTsoft Alyac 2.5.7.7. A specially-craft

Improper input validation for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable denial

Improper access control for some Intel(R) Xeon(R) Processors may allow an authenticated user to potentially enable infor

Insufficient control flow management in the Intel(R) Advisor software before version 7.6.0.37 may allow an authenticated

Sensitive information accessible by physical probing of JTAG interface for some Intel(R) Processors with SGX may allow a

Hardware debug modes and processor INIT setting that allow override of locks for some Intel(R) Processors in Intel(R) Bo

An exploitable use-after-free vulnerability exists in WPS Spreadsheets ( ET ) as part of WPS Office, version 11.2.0.1035

Observable behavioral discrepancy in some Intel(R) Processors may allow an authorized user to potentially enable informa

Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potent

Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an

Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to po

Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user t

Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to po

Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow

Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged us

Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user t

Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel

Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD