2023

Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may

Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 m

Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potential

Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to

Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the

TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory cont

A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masque

Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to poten

Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated use

Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of servi

Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enabl

Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service vi

Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalatio

Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable information

Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an

Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information disc

Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of servi

SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest

Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP

Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-b

An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 an

A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM

Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web

A vulnerability has been identified in COMOS (All versions < V10.4.4). Caching system in the affected application leaks

PX4 autopilot is a flight control solution for drones. In affected versions a global buffer overflow vulnerability exist

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker coul

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker coul

A vulnerability has been found in Intelbras RX 1500 1.1.9 and classified as problematic. Affected by this vulnerability

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Teli

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version

A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is

Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version

When duplicating a BigBlueButton activity, the original meeting ID was also duplicated instead of using a new ID for the

Separate Groups mode restrictions were not honoured in the forum summary report, which would display users from other gr

Insufficient web service capability checks made it possible to move categories a user had permission to manage, to a par

Stronger revision number limitations were required on file serving endpoints to improve cache poisoning protection.

The course upload preview contained an XSS risk for users uploading unsafe data.

H5P metadata automatically populated the author with the user's username, which could be sensitive information.

Students in "Only see own membership" groups could see other students in the group, which should be hidden.

The CSV grade import method contained an XSS risk for users importing the spreadsheet, if it contained unsafe content.

A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Teli

A CWE-526: Exposure of Sensitive Information Through Environmental Variables vulnerability exists in Telit Cinterion BGS

Improper Restriction of Excessive Authentication Attempts vulnerability in Samsung Smart TV UE40D7000 version T-GAPDEUC-

Cosign is a sigstore signing tool for OCI containers. Cosign is susceptible to a denial of service by an attacker contro

A vulnerability classified as problematic has been found in msyk FMDataAPI up to 22. Affected is an unknown function of

Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID

A vulnerability classified as problematic was found in dstar2018 Agency up to 61. Affected by this vulnerability is an u

Cross-site Scripting in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Cross-Site Request Forgery in GitHub repository pkp/pkp-lib prior to 3.3.0-16.

Buffer copy without checking size of input ('Classic Buffer Overflow') vulnerability in cgi component in Synology SSL VP