Menu

Star on GitHub · 3.2k

2024

39,956 vulnerabilities published in 2024.

Results

39,956· Page 115/800
5.5
CVE-2024-29076

Uncaught exception for some Intel(R) CST software before version 8.7.10803 may allow an authenticated user to potentiall

6.7
CVE-2024-28952

Uncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may allow an authenticated

6.7
CVE-2024-28950

Uncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before version 2024.2 may all

5.9
CVE-2024-28885

Observable discrepancy in some Intel(R) QAT Engine for OpenSSL software before version v1.6.1 may allow information disc

6.7
CVE-2024-28881

Uncontrolled search path for some Intel(R) Fortran Compiler Classic software before version 2021.13 may allow an authent

5.4
CVE-2024-28169

Cleartext transmission of sensitive information for some BigDL software maintained by Intel(R) before version 2.5.0 may

2.2
CVE-2024-28051

Out-of-bounds read in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially en

5.7
CVE-2024-28049

Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi wireless

2.2
CVE-2024-28030

NULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentia

7.5
CVE-2024-28028

Improper input validation in some Intel(R) Neural Compressor software before version v3.0 may allow an unauthenticated u

4.4
CVE-2024-27200

Improper access control in some Intel(R) Granulate(TM) software before version 4.30.1 may allow a authenticated user to

6.7
CVE-2024-26017

Uncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may allow an authenticated

6.7
CVE-2024-25647

Incorrect default permissions for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may

3.8
CVE-2024-25565

Insufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may allow an authenticated us

3.4
CVE-2024-25563

Improper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi before vers

7.2
CVE-2024-24985

Exposure of resource to wrong sphere in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to poten

6.5
CVE-2024-24984

Improper input validation for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.40 may allow an

5.3
CVE-2024-23919

Improper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user to potentially enable es

8.8
CVE-2024-23918

Improper conditions check in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SGX ma

6.7
CVE-2024-23312

Uncontrolled search path for some Intel(R) Binary Configuration Tool software for Windows before version 3.4.5 may allow

6.6
CVE-2024-23198

Improper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R) Killer(TM) Wi-Fi products

7.2
CVE-2024-22185

Time-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow a privileged user to p

4.7
CVE-2024-21853

Improper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel(R) Xeon(R) Processors m

6.0
CVE-2024-21850

Sensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module software before version 1

7.2
CVE-2024-21820

Incorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations when using Intel(R) SG

4.2
CVE-2024-21808

Improper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to pote

7.1
CVE-2024-21799

Path traversal for some Intel(R) Extension for Transformers software before version 1.5 may allow an authenticated user

4.8
CVE-2024-21783

Integer overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated user to potentially ena

6.5
CVE-2024-11193

An information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password is logged in plaintext

5.4
CVE-2024-42834

A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SAC

4.3
CVE-2024-40443

SQL Injection vulnerability in Simple Laboratory Management System using PHP and MySQL v.1.0 allows a remote attacker to

4.8
CVE-2023-38920

Cross Site Scripting vulnerability in Cyber Cafe Management System v.1.0 allows a local attacker to execute arbitrary co

N/A
CVE-2024-49379

Umbrel is a home server OS for self-hosting. The login functionality of Umbrel before version 1.2.2 contains a reflected

7.3
CVE-2024-43093KEV

In shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path filter designed to prev

9.8
CVE-2024-43091

In filterMask of SkEmbossMaskFilter.cpp, there is a possible out of bounds write due to an integer overflow. This could

5.0
CVE-2024-43090

In multiple locations, there is a possible cross-user image read due to a missing permission check. This could lead to l

7.8
CVE-2024-43089

In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission

7.8
CVE-2024-43088

In multiple functions in AppInfoBase.java, there is a possible way to manipulate app permission settings belonging to an

7.8
CVE-2024-43087

In getInstalledAccessibilityPreferences of AccessibilitySettings.java, there is a possible way to hide an enabled access

5.5
CVE-2024-43086

In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a thir

7.8
CVE-2024-43085

In handleMessage of UsbDeviceManager.java, there is a possible method to access device contents over USB without unlocki

5.5
CVE-2024-43084

In visitUris of multiple files, there is a possible information disclosure due to a confused deputy. This could lead to

5.5
CVE-2024-43083

In validate of WifiConfigurationUtil.java , there is a possible persistent denial of service due to resource exhaustion.

5.5
CVE-2024-43082

In onActivityResult of EditUserPhotoController.java, there is a possible cross-user media read due to a confused deputy.

7.8
CVE-2024-43081

In installExistingPackageAsUser of InstallPackageHelper.java, there is a possible carrier restriction bypass due to a lo

7.8
CVE-2024-43080

In onReceive of AppRestrictionsFragment.java, there is a possible escalation of privilege due to unsafe deserialization.

7.8
CVE-2024-40671

In DevmemIntChangeSparse2 of devicemem_server.c, there is a possible way to achieve arbitrary code execution due to a mi

7.8
CVE-2024-40661

In mayAdminGrantPermission of AdminRestrictedPermissionsUtils.java, there is a possible way to access the microphone due

7.8
CVE-2024-40660

In setTransactionState of SurfaceFlinger.cpp, there is a possible way to change protected display attributes due to a lo

7.8
CVE-2024-34747

In DevmemXIntMapPages of devicemem_server.c, there is a possible use-after-free due to a logic error in the code. This c

Test your stack for 2024issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.