2024

Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which

An HTML injection vulnerability exists where an authenticated, remote attacker with administrator privileges on the Sec

An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass S

An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker t

Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows new identities from configur

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into

A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML v

A reflected cross-site scripting (XSS) vulnerability in the Captive Portal feature of Palo Alto Networks PAN-OS software

A reflected cross-site scripting (XSS) vulnerability in the GlobalProtect portal feature of Palo Alto Networks PAN-OS so

An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enable

Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, maki

A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a malicious authenticated read-

When LDAP remote authentication is configured on F5OS, a remote user without an assigned role will be incorrectly autho

When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Applianc

A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read fil

BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but d

A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scri

A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scri

A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scri

A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or

A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or

A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the A

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the A

Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintai

IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using for

Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authent

Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0 may allow an authenticat

Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user t

Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user

Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to

Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged us

Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user

Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may a

Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potenti

Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potent

Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of priv

Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to po

Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially

Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to poten

Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially

Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 ma

Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authen

Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially

Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240

Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user t

Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated us

Improper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software

Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potent

Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated use