2025

Uncontrolled resource consumption for some Gaudi software before version 1.21.0 within Ring 3: User Applications may all

Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: Use

Null pointer dereference for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications m

Improper control of dynamically-managed code resources for some Intel(R) NPU Drivers within Ring 3: User Applications ma

Protection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may allow a denial of servic

Uncontrolled search path for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within R

Improper link resolution before file access ('link following') for some Intel(R) Server Configuration Utility software a

Improper privilege management for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Appl

Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Appli

Improper input validation for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicat

Uncontrolled search path for the Intel(R) System Support Utility before version 4.1.0 within Ring 3: User Applications m

Protection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Appli

Buffer overflow for some Intel(R) QAT Windows software before version 2.6.0. within Ring 3: User Applications may allow

Improper access control for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicatio

Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.160 within Ring

Uncontrolled search path for some Intel(R) Killer(TM) Performance Suite software before version killer 4.0 40.25.509.146

Insecure inherited permissions for some Intel(R) Rapid Storage Technology Application before version 20.0.1021 within Ri

Improper access control for some SigTest before version 6.1.10 within Ring 3: User Applications may allow an escalation

External control of file name or path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: U

Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Devi

Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow

Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applicati

Login credentials are inadvertently recorded in logs if a Syslog Server is configured in NETGEAR WAX610 and WAX610Y (AX1

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 145, Firefox ESR 140.5, Fir

Collision in MiniFilter driver in Avast Software Avast Free Antivirus  before 25.9  on Windows allows a local attacker w

Zohocorp ManageEngine OpManager versions 128609 and below are vulnerable to Stored XSS Vulnerability in the SNMP trap pr

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection du

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Aryom Softw

The Classified Listing – AI-Powered Classified ads & Business Directory Plugin plugin for WordPress is vulnerable to una

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to missing payment veri

The Hydra Booking — Appointment Scheduling & Booking Calendar plugin for WordPress is vulnerable to unauthorized booking

The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usabilit

The VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator-privileged user to gain L

An improper access restriction to a folder in Bitdefender Endpoint Security Tools for Mac (BEST) before 7.20.52.200087 a

An ACAP configuration file has improper permissions and lacks input validation, which could potentially lead to privileg

An ACAP configuration file has improper permissions, which could allow command injection and potentially lead to privile

A 3rd-party component exposed its password in process arguments, allowing for low-privileged users to access it.

ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escala

The ACAP Application framework could allow privilege escalation through a symlink attack. This vulnerability can only be

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to pote

A malicious ACAP application can gain access to admin-level service account credentials used by legitimate ACAP applicat

An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution. This vuln

The Make Email Customizer for WooCommerce WordPress plugin through 1.0.6 lacks proper authorization checks and option va

The Progress Bar Blocks for Gutenberg plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File upl

The Geopost plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'height' parameter of the 'geopost