2023

Incorrect default permissions in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenti

Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially

Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user

Uncontrolled resource consumption in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated us

Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enab

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.

Protection mechanism failure in some Intel(R) Distribution of OpenVINO toolkit software before version 2023.0.0 may allo

Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may all

NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101

Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may all

Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user t

Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation

Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of p

Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to pote

Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially e

Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially

Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of servic

Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervis

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privi

Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privi

Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integri

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inva

NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated

Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may

Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authentica

Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may all

Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before versio

Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an inva

Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to rea

Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds

An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0

An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007

An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may

Microsoft SharePoint Server Remote Code Execution Vulnerability

A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10,

An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allo

Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability

Microsoft Office Security Feature Bypass Vulnerability

Windows Hyper-V Information Disclosure Vulnerability

Windows Kernel Information Disclosure Vulnerability

Windows NTFS Information Disclosure Vulnerability

Open Management Infrastructure Information Disclosure Vulnerability

Visual Studio Denial of Service Vulnerability

Microsoft Dynamics 365 Sales Spoofing Vulnerability

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an

An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.

A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Wham Product Visibility by Country for WooCommerce

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Lavacode Lava Directory Manager plugin <= 1.1.34