2023

bleach.clean behavior parsing style attributes could result in a regular expression denial of service (ReDoS). Calls to

Incorrect default permissions in the software installer for some Intel(R) QAT drivers for Linux before version 4.17 may

Improper access control in some QATzip software maintained by Intel(R) before version 1.0.9 may allow an authenticated u

Out of bounds read in firmware for OpenBMC in some Intel(R) platforms before version 0.72 may allow unauthenticated user

Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to pote

Incorrect default permissions in some memory controller configurations for some Intel(R) Xeon(R) Processors when using I

Improper input validation in the Intel(R) SUR software before version 2.4.8902 may allow an authenticated user to potent

Improper access control in the Intel(R) SUR software before version 2.4.8902 may allow an unauthenticated user to potent

Improper access control in the Crypto API Toolkit for Intel(R) SGX before version 2.0 commit ID 91ee496 may allow an aut

Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV.

Stack overflow vulnerability in Aspire E5-475G 's BIOS firmware, in the FpGui module, a second call to GetVariable servi

Active debug code in some Intel (R) SPS firmware before version SPS_E5_04.04.04.300.0 may allow an authenticated user to

Insufficient control flow management in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allo

Improper initialization in the Intel(R) Battery Life Diagnostic Tool software before version 2.2.0 may allow an authenti

Insufficient control flow management in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authen

Path traversal in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user to potent

Description: Race condition in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to poten

Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena

Improper initialization in the Intel(R) TXT SINIT ACM for some Intel(R) Processors may allow a privileged user to potent

Use after free in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escal

Protection mechanism failure in the Intel(R) DSA software before version 22.4.26 may allow an authenticated user to pote

Insufficient visual distinction of homoglyphs presented to user in the Intel(R) oneAPI DPC++/C++ Compiler before version

Improper neutralization in the Intel(R) Quartus Prime Pro and Standard edition software may allow an authenticated user

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially e

Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially ena

Insecure inherited permissions in the Intel(R) oneAPI Toolkits oneapi-cli before version 0.2.0 may allow an authenticate

Improper handling of Unicode encoding in source code to be compiled by the Intel(R) C++ Compiler Classic before version

Insufficient granularity of access control in out-of-band management in some Intel(R) Atom and Intel Xeon Scalable Proce

node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-b

A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb vers

A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, Fo

A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through

Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC 9.4.1 and below

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 an

An improper neutralization of input during web page generation [CWE-79] vulnerability in FortiOS versions 7.0.0 to 7.0.7

A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or comma

An insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8

A improper neutralization of argument delimiters in a command ('argument injection') in Fortinet FortiNAC versions 9.4.0

An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC vers

An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface

An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb 7.0.0

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiADC versio

Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods ar

Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM o

A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to

The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file upl

Improper Restriction of Excessive Authentication Attempts in GitHub repository modoboa/modoboa-installer prior to 2.0.4.

NetModule NSRW web administration interface executes an OS command constructed with unsanitized user input. A successful

In PHP 8.0.X before 8.0.28, 8.1.X before 8.1.16 and 8.2.X before 8.2.3, excessive number of parts in HTTP form upload ca