Search Results (371834 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2022-41784 1 Intel 1 One Boot Flash Update 2025-01-27 8.8 High
Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow an authenticated user to potentially enable escalation of privilege via local access
CVE-2022-42465 1 Intel 1 One Boot Flash Update 2025-01-27 7.2 High
Improper access control in kernel mode driver for the Intel(R) OFU software before version 14.1.30 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2022-44619 1 Intel 1 Data Center Manager 2025-01-27 8.2 High
Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-41998 1 Intel 1 Data Center Manager 2025-01-27 6.7 Medium
Uncontrolled search path in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-43475 1 Intel 1 Data Center Manager 2025-01-27 6 Medium
Insecure storage of sensitive information in the Intel(R) DCM software before version 5.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-43465 1 Intel 1 Setup And Configuration Software 2025-01-27 5 Medium
Improper authorization in the Intel(R) SCS software all versions may allow an authenticated user to potentially enable denial of service via local access.
CVE-2022-45128 1 Intel 1 Endpoint Management Assistant 2025-01-27 5 Medium
Improper authorization in the Intel(R) EMA software before version 1.9.0.0 may allow an authenticated user to potentially enable denial of service via local access.
CVE-2022-43507 1 Intel 1 Quickassist Technology Engine 2025-01-27 7.5 High
Improper buffer restrictions in the Intel(R) QAT Engine for OpenSSL before version 0.6.16 may allow a privileged user to potentially enable escalation of privilege via network access.
CVE-2022-41693 1 Intel 1 Quartus Prime 2025-01-27 6.7 Medium
Uncontrolled search path in the Intel(R) Quartus(R) Prime Pro edition software before version 22.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2022-41610 1 Intel 2 Endpoint Management Assistant Configuration Tool, Manageability Commander 2025-01-27 5 Medium
Improper authorization in Intel(R) EMA Configuration Tool before version 1.0.4 and Intel(R) MC before version 2.4 software may allow an authenticated user to potentially enable denial of service via local access.
CVE-2022-43474 1 Intel 2 Dsp Builder, Quartus Prime 2025-01-27 6.7 Medium
Uncontrolled search path for the DSP Builder software installer before version 22.4 for Intel(R) FPGAs Pro Edition may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2024-22180 1 Openatom 1 Openharmony 2025-01-27 3.3 Low
in OpenHarmony v4.0.0 and prior versions allow a local attacker cause DOS through use after free.
CVE-2023-47159 1 Ibm 1 Sterling File Gateway 2025-01-27 4.3 Medium
IBM Sterling File Gateway 6.0.0.0 through 6.1.2.5 and 6.2.0.0 through 6.2.0.1 could allow an authenticated user to enumerate usernames due to an observable discrepancy in request responses.
CVE-2024-22092 1 Openatom 1 Openharmony 2025-01-27 7.7 High
in OpenHarmony v3.2.4 and prior versions allow a remote attacker bypass permission verification to install apps, although these require user action.
CVE-2024-35112 1 Ibm 1 Control Center 2025-01-27 5.4 Medium
IBM Control Center 6.2.1 and 6.3.1 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system.
CVE-2024-35113 1 Ibm 1 Control Center 2025-01-27 4.3 Medium
IBM Control Center 6.2.1 and 6.3.1 could allow an authenticated user to obtain sensitive information exposed through a directory listing.
CVE-2023-34316 1 Deltaww 1 Infrasuite Device Master 2025-01-27 6.5 Medium
​An attacker could bypass the latest Delta Electronics InfraSuite Device Master (versions prior to 1.0.7) patch, which could allow an attacker to retrieve file contents.
CVE-2023-31531 1 Motorola 2 Cx2l, Cx2l Firmware 2025-01-27 8.8 High
Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter.
CVE-2023-31530 1 Motorola 2 Cx2l, Cx2l Firmware 2025-01-27 8.8 High
Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the smartqos_priority_devices parameter.
CVE-2023-31529 1 Motorola 2 Cx2l, Cx2l Firmware 2025-01-27 8.8 High
Motorola CX2L Router 1.0.1 was discovered to contain a command injection vulnerability via the system_time_timezone parameter.