# CVEs published 2023-08-11

155 CVEs were published on August 11, 2023: 2 critical, 36 high. Days are UTC.

- [CVE-2023-0871](https://cve.now/CVE-2023-0871.md): An XML External Entity injection vulnerability (CVSS 5.4, The OpenNMS Group Horizon · The OpenNMS Group Meridian +1)
- [CVE-2023-39949](https://cve.now/CVE-2023-39949.md): Improper validation of sequence numbers leading to remotely reachable assertion failure (CVSS 7.5, eProsima Fast-DDS)
- [CVE-2023-39948](https://cve.now/CVE-2023-39948.md): Uncaught fastcdr exception (Unexpected CDR type received) crashing fastdds (CVSS 7.5, eProsima Fast-DDS)
- [CVE-2023-39947](https://cve.now/CVE-2023-39947.md): Another heap overflow in push\_back\_helper (CVSS 8.2, eProsima Fast-DDS)
- [CVE-2023-39946](https://cve.now/CVE-2023-39946.md): Heap overflow in push\_back\_helper due to a CDR message (CVSS 8.2, eProsima Fast-DDS)
- [CVE-2023-32267](https://cve.now/CVE-2023-32267.md): OpenText / Micro Focus ArcSight Management Center Remote Vulnerability (CVSS 6.4, ArcSight Management Center)
- [CVE-2023-39945](https://cve.now/CVE-2023-39945.md): Malformed serialized data in a data submessage leads to unhandled exception (CVSS 8.2, eProsima Fast-DDS)
- [CVE-2023-39534](https://cve.now/CVE-2023-39534.md): Malformed GAP submessage triggers assertion failure (CVSS 7.5, eProsima Fast-DDS)
- [CVE-2023-39418](https://cve.now/CVE-2023-39418.md): Postgresql: merge fails to enforce update or select row security policies (CVSS 3.1, Red Hat Enterprise Linux · Red Hat Software Collections)
- [CVE-2023-39417](https://cve.now/CVE-2023-39417.md): Postgresql: extension script @substitutions@ within quoting allow sql injection (CVSS 7.5, Red Hat Advanced Cluster Security · Red Hat Enterprise L… +5)
- [CVE-2023-3937](https://cve.now/CVE-2023-3937.md): Cross site scripting vulnerabilities in Snow License Manager (CVSS 4.8, Snow Software Snow License Manager)
- [CVE-2023-3864](https://cve.now/CVE-2023-3864.md): SQL injection vulnerability in Snow License Manager (CVSS 7.2, Snow Software SLM)
- [CVE-2023-39553](https://cve.now/CVE-2023-39553.md): Apache Airflow Drill Provider Arbitrary File Read Vulnerability (CVSS 7.5, Apache Software Foundation Apache Airflow Drill Provider… +1)
- [CVE-2023-4108](https://cve.now/CVE-2023-4108.md): Audit logging fails to sanitize post metadata (CVSS 4.5, Mattermost · github.com/mattermost/mattermost-server/v6)
- [CVE-2023-4107](https://cve.now/CVE-2023-4107.md): Incorrect authorization allows a user manager to update a system admin (CVSS 6.7, Mattermost · github.com/mattermost/mattermost-server/v6)
- [CVE-2023-4106](https://cve.now/CVE-2023-4106.md): A guest user can perform various actions on public playbooks (CVSS 6.3, Mattermost · github.com/mattermost/mattermost-server/v6)
- [CVE-2023-4105](https://cve.now/CVE-2023-4105.md): Attachment of deleted message in a thread remains accessible and downloadable (CVSS 3.1, Mattermost · github.com/mattermost/mattermost-server/v6)
- [CVE-2023-40254](https://cve.now/CVE-2023-40254.md): Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, G (CVSS 7.5, Genians Genian NAC · Genians Genian ZTNA)
- [CVE-2023-3824](https://cve.now/CVE-2023-3824.md): Buffer overflow and overread in phar\_dir\_read() (CVSS 9.4, PHP Group PHP)
- [CVE-2023-3823](https://cve.now/CVE-2023-3823.md): Security issue with external entity loading in XML without enabling it (CVSS 8.6, PHP Group PHP)
- [CVE-2023-40253](https://cve.now/CVE-2023-40253.md): Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTN (CVSS 6.0, Genians Genian NAC · Genians Genian ZTNA)
- [CVE-2023-32663](https://cve.now/CVE-2023-32663.md): Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to potentially enable es (CVSS 6.7, Intel(R) RealSense(TM) SDKs in)
- [CVE-2023-32543](https://cve.now/CVE-2023-32543.md): Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation o (CVSS 6.7, Intel(R) ITS sofware)
- [CVE-2023-32547](https://cve.now/CVE-2023-32547.md): Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to pote (CVSS 6.7, MAVinci Desktop Software for Intel(R) Falcon 8+)
- [CVE-2023-32609](https://cve.now/CVE-2023-32609.md): Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated user to potentially ena (CVSS 5.0, Intel Unite(R) android application)
- [CVE-2023-34349](https://cve.now/CVE-2023-34349.md): Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access (CVSS 4.6, Intel(R) NUC BIOS firmware)
- [CVE-2023-32285](https://cve.now/CVE-2023-32285.md): Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local acc (CVSS 6.0, Intel(R) NUC BIOS firmware)
- [CVE-2023-22330](https://cve.now/CVE-2023-22330.md): Use of uninitialized resource in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure vi (CVSS 6.0, Intel(R) NUC BIOS firmware)
- [CVE-2023-22356](https://cve.now/CVE-2023-22356.md): Improper initialization in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure via loca (CVSS 6.0, Intel(R) NUC BIOS firmware)
- [CVE-2023-22444](https://cve.now/CVE-2023-22444.md): Improper initialization in some Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Extreme Kit, Intel(R) NUC 11 Performance Kit, Intel (CVSS 6.0, Intel(R) NUC 13 Extreme Compute Element, Intel(R) NUC 13 Ex…)
- [CVE-2023-34438](https://cve.now/CVE-2023-34438.md): Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access (CVSS 7.5, Intel(R) NUC BIOS firmware)
- [CVE-2022-36372](https://cve.now/CVE-2022-36372.md): Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege vi (CVSS 7.5, Intel(R) NUC BIOS firmware)
- [CVE-2023-22449](https://cve.now/CVE-2023-22449.md): Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via l (CVSS 7.5, Intel(R) NUC BIOS firmware)
- [CVE-2023-34086](https://cve.now/CVE-2023-34086.md): Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via l (CVSS 8.2, Intel(R) NUC BIOS firmware)
- [CVE-2023-32617](https://cve.now/CVE-2023-32617.md): Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privilege (CVSS 8.2, Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Comp…)
- [CVE-2023-30760](https://cve.now/CVE-2023-30760.md): Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated (CVSS 3.3, Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…)
- [CVE-2023-33877](https://cve.now/CVE-2023-33877.md): Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticate (CVSS 3.3, Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…)
- [CVE-2023-33867](https://cve.now/CVE-2023-33867.md): Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an aut (CVSS 4.4, Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…)
- [CVE-2023-29243](https://cve.now/CVE-2023-29243.md): Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow a priviledge (CVSS 4.4, Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…)
- [CVE-2023-34427](https://cve.now/CVE-2023-34427.md): Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an aut (CVSS 5.3, Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…)
- [CVE-2023-32656](https://cve.now/CVE-2023-32656.md): Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an aut (CVSS 5.3, Intel(R) RealSense(TM) ID software for Intel(R) RealSense(T…)
- [CVE-2023-29151](https://cve.now/CVE-2023-29151.md): Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable esca (CVSS 6.7, Intel(R) PSR SDK)
- [CVE-2023-31246](https://cve.now/CVE-2023-31246.md): Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially e (CVSS 6.7, Intel(R) SDP Tool software)
- [CVE-2023-34355](https://cve.now/CVE-2023-34355.md): Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Wind (CVSS 6.7, Intel(R) Server Board M10JNP2SB integrated BMC video drivers)
- [CVE-2022-44612](https://cve.now/CVE-2022-44612.md): Use of hard-coded credentials in some Intel(R) Unison(TM) software before version 10.12 may allow an authenticated user user to potentially (CVSS 5.5, Intel(R) Unison(TM) software)
- [CVE-2023-25757](https://cve.now/CVE-2023-25757.md): Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable escalati (CVSS 7.3, Intel(R) Unison(TM) software)
- [CVE-2022-29887](https://cve.now/CVE-2022-29887.md): Cross-site Scripting (XSS) in some Intel(R) Manageability Commander software before version 2.3 may allow an unauthenticated user to potenti (CVSS 8.1, Intel(R) Manageability Commander software)
- [CVE-2023-29500](https://cve.now/CVE-2023-29500.md): Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially (CVSS 5.3, Intel(R) NUCs)
- [CVE-2023-27887](https://cve.now/CVE-2023-27887.md): Improper initialization in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable information disclosure via (CVSS 6.1, Intel(R) NUCs)
- [CVE-2023-29494](https://cve.now/CVE-2023-29494.md): Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege (CVSS 7.5, Intel(R) NUCs)
- [CVE-2022-37336](https://cve.now/CVE-2022-37336.md): Improper input validation in BIOS firmware for some Intel(R) NUC may allow a privileged user to potentially enable escalation of privilege v (CVSS 7.9, Intel(R) NUC)
- [CVE-2023-28823](https://cve.now/CVE-2023-28823.md): Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticat (CVSS 6.7, Intel(R) oneAPI Toolkit and component software installers)
- [CVE-2023-27391](https://cve.now/CVE-2023-27391.md): Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged us (CVSS 6.7, Intel(R) oneAPI Toolkit and component software installers)
- [CVE-2023-28711](https://cve.now/CVE-2023-28711.md): Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to (CVSS 5.5, Hyperscan Library maintained by Intel)
- [CVE-2023-27515](https://cve.now/CVE-2023-27515.md): Cross-site scripting (XSS) for the Intel(R) DSA software before version 23.1.9 may allow unauthenticated user to potentially enable escalati (CVSS 8.1, Intel(R) DSA software)
- [CVE-2023-28380](https://cve.now/CVE-2023-28380.md): Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable (CVSS 8.8, Intel(R) AI Hackathon software)
- [CVE-2022-29470](https://cve.now/CVE-2022-29470.md): Improper access control in the Intel® DTT Software before version 8.7.10400.15482 may allow an authenticated user to potentially enable esca (CVSS 6.7, Intel DTT Software)
- [CVE-2023-28658](https://cve.now/CVE-2023-28658.md): Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable (CVSS 6.7, Intel(R) oneMKL software)
- [CVE-2022-25864](https://cve.now/CVE-2022-25864.md): Uncontrolled search path in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escala (CVSS 6.7, Intel(R) oneMKL software)
- [CVE-2023-28714](https://cve.now/CVE-2023-28714.md): Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow (CVSS 8.2, Intel(R) PROSet/Wireless WiFi software for Windows)
- [CVE-2023-28385](https://cve.now/CVE-2023-28385.md): Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially (CVSS 8.2, Intel(R) NUC Pro Software Suite for Windows)
- [CVE-2023-27392](https://cve.now/CVE-2023-27392.md): Incorrect default permissions in the Intel(R) Support android application before version v23.02.07 may allow a privileged user to potentiall (CVSS 4.4, Intel(R) Support android application)
- [CVE-2023-26587](https://cve.now/CVE-2023-26587.md): Improper input validation for the Intel(R) Easy Streaming Wizard software may allow an authenticated user to potentially enable escalation o (CVSS 7.8, Intel(R) Easy Streaming Wizard software)
- [CVE-2023-27509](https://cve.now/CVE-2023-27509.md): Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enabl (CVSS 6.6, Intel(R) ISPC software installers)
- [CVE-2023-27505](https://cve.now/CVE-2023-27505.md): Incorrect default permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installers before version 22.1 .1 may allow (CVSS 6.7, Intel(R) Advanced Link Analyzer Standard Edition software i…)
- [CVE-2022-45112](https://cve.now/CVE-2022-45112.md): Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escal (CVSS 7.3, Intel(R) VROC software)
- [CVE-2023-25944](https://cve.now/CVE-2023-25944.md): Uncontrolled search path element in some Intel(R) VCUST Tool software downloaded before February 3nd 2023 may allow an authenticated user to (CVSS 6.7, Intel(R) VCUST Tool software)
- [CVE-2023-28405](https://cve.now/CVE-2023-28405.md): Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to pot (CVSS 6.7, Intel(R) Distribution of OpenVINO(TM) Toolkit)
- [CVE-2023-27506](https://cve.now/CVE-2023-27506.md): Improper buffer restrictions in the Intel(R) Optimization for Tensorflow software before version 2.12 may allow an authenticated user to pot (CVSS 5.5, Intel(R) Optimization for Tensorflow software · intel-te… +2)
- [CVE-2022-41804](https://cve.now/CVE-2022-41804.md): Unauthorized error injection in Intel(R) SGX or Intel(R) TDX for some Intel(R) Xeon(R) Processors may allow a privileged user to potentially (CVSS 7.2, Intel(R) Xeon(R) Processors)
- [CVE-2023-23908](https://cve.now/CVE-2023-23908.md): Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable inform (CVSS 6.0, 3rd Generation Intel(R) Xeon(R) Scalable processors)
- [CVE-2023-22276](https://cve.now/CVE-2023-22276.md): Race condition in firmware for some Intel(R) Ethernet Controllers and Adapters E810 Series before version 1.7.2.4 may allow an authenticated (CVSS 6.5, Intel(R) Ethernet Controllers and Adapters E810 Series)
- [CVE-2023-22841](https://cve.now/CVE-2023-22841.md): Unquoted search path in the software installer for the System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel( (CVSS 6.7, System Firmware Update Utility (SysFwUpdt) for some Intel(R…)
- [CVE-2023-23577](https://cve.now/CVE-2023-23577.md): Uncontrolled search path element for some ITE Tech consumer infrared drivers before version 5.5.2.1 for Intel(R) NUC may allow an authentica (CVSS 6.7, ITE Tech consumer infrared drivers for Intel(R) NUC)
- [CVE-2022-40982](https://cve.now/CVE-2022-40982.md): Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processo (CVSS 6.5, Intel(R) Processors)
- [CVE-2023-25182](https://cve.now/CVE-2023-25182.md): Uncontrolled search path element in the Intel(R) Unite(R) Client software for Mac before version 4.2.11 may allow an authenticated user to p (CVSS 4.2, Intel(R) Unite(R) Client software for Mac)
- [CVE-2023-25773](https://cve.now/CVE-2023-25773.md): Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated user (CVSS 7.5, Intel(R) Unite(R) Hub software installer for Windows)
- [CVE-2023-22840](https://cve.now/CVE-2023-22840.md): Improper neutralization in software for the Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentiall (CVSS 3.3, Intel(R) oneVPL GPU software)
- [CVE-2023-22338](https://cve.now/CVE-2023-22338.md): Out-of-bounds read in some Intel(R) oneVPL GPU software before version 22.6.5 may allow an authenticated user to potentially enable informat (CVSS 4.4, Intel(R) oneVPL GPU software)
- [CVE-2022-43505](https://cve.now/CVE-2022-43505.md): Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable den (CVSS 4.1, Intel(R) Processors)
- [CVE-2022-27879](https://cve.now/CVE-2022-27879.md): Improper buffer restrictions in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information (CVSS 5.3, Intel(R) Processors)
- [CVE-2022-38083](https://cve.now/CVE-2022-38083.md): Improper initialization in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disc (CVSS 6.1, Intel(R) Processors)
- [CVE-2022-44611](https://cve.now/CVE-2022-44611.md): Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of (CVSS 6.9, Intel(R) Processors)
- [CVE-2022-37343](https://cve.now/CVE-2022-37343.md): Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of pr (CVSS 7.2, Intel(R) Processors)
- [CVE-2022-38973](https://cve.now/CVE-2022-38973.md): Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of (CVSS 3.3, Intel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…)
- [CVE-2022-41984](https://cve.now/CVE-2022-41984.md): Protection mechanism failure for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and Decembe (CVSS 4.4, Intel(R) Arc(TM) graphics cards A770 and A750 Limited Editi…)
- [CVE-2023-24016](https://cve.now/CVE-2023-24016.md): Uncontrolled search path element in some Intel(R) Quartus(R) Prime Pro and Standard edition software for linux may allow an authenticated us (CVSS 6.7, Intel(R) Quartus(R) Prime Pro and Standard edition software…)
- [CVE-2022-43456](https://cve.now/CVE-2022-43456.md): Uncontrolled search path in some Intel(R) RST software before versions 16.8.5.1014.5, 17.11.3.1010.2, 18.7.6.1011.2 and 19.5.2.1049.5 may al (CVSS 6.7, Intel(R) RST software)
- [CVE-2023-25775](https://cve.now/CVE-2023-25775.md): Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to (CVSS 5.6, Intel(R) Ethernet Controller RDMA driver for linux)
- [CVE-2022-29871](https://cve.now/CVE-2022-29871.md): Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially ena (CVSS 6.7, Intel(R) CSME software installer)
- [CVE-2022-38102](https://cve.now/CVE-2022-38102.md): Improper Input validation in firmware for some Intel(R) Converged Security and Management Engine before versions 15.0.45, and 16.1.27 may al (CVSS 7.2, Intel(R) Converged Security and Management Engine)
- [CVE-2022-36392](https://cve.now/CVE-2022-36392.md): Improper input validation in some firmware for Intel(R) AMT and Intel(R) Standard Manageability before versions 11.8.94, 11.12.94, 11.22.94, (CVSS 8.6, Intel(R) AMT and Intel(R) Standard Manageability in Intel (…)
- [CVE-2022-38076](https://cve.now/CVE-2022-38076.md): Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an authenticated user to potentially (CVSS 3.8, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software)
- [CVE-2022-36351](https://cve.now/CVE-2022-36351.md): Improper input validation in some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow an unauthenticated user to potentiall (CVSS 4.3, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software)
- [CVE-2022-40964](https://cve.now/CVE-2022-40964.md): Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enabl (CVSS 7.9, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software)
- [CVE-2022-46329](https://cve.now/CVE-2022-46329.md): Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi software may allow a privileged user to potentially enable escalation of (CVSS 8.2, Intel(R) PROSet/Wireless WiFi software)
- [CVE-2022-27635](https://cve.now/CVE-2022-27635.md): Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enabl (CVSS 8.2, Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software)
- [CVE-2022-34657](https://cve.now/CVE-2022-34657.md): Improper input validation in firmware for some Intel(R) PCSD BIOS before version 02.01.0013 may allow a privileged user to potentially enabl (CVSS 6.0, Intel(R) PCSD BIOS)
- [CVE-2023-28938](https://cve.now/CVE-2023-28938.md): Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potential (CVSS 3.4, Intel(R) SSD Tools software)
- [CVE-2023-28736](https://cve.now/CVE-2023-28736.md): Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalatio (CVSS 5.7, Intel(R) SSD Tools software)
- [CVE-2023-37512](https://cve.now/CVE-2023-37512.md): HCL Traveler Companion is vulnerable to revealing sensitive information via the task switcher (CVSS 3.3, HCL Software HCL Traveler Companion)
- [CVE-2023-37513](https://cve.now/CVE-2023-37513.md): HCL Traveler To Do is vulnerable to revealing sensitive information via the task switcher (CVSS 3.3, HCL Software HCL Traveler To Do)
- [CVE-2023-37511](https://cve.now/CVE-2023-37511.md): HCL Traveler To Do is affected by App Transport Security (ATS) settings allowing insecure loads in web content (CVSS 3.5, HCL Software HCL Traveler To Do)
- [CVE-2023-4304](https://cve.now/CVE-2023-4304.md): Business Logic Errors in froxlor/froxlor (CVSS 3.8, froxlor/froxlor)
- [CVE-2020-19952](https://cve.now/CVE-2020-19952.md): Cross Site Scripting (XSS) vulnerability in Rendering Engine in jbt Markdown Editor thru commit 2252418c27dffbb35147acd8ed324822b8919477, al (no CVSS)
- [CVE-2020-20523](https://cve.now/CVE-2020-20523.md): Cross Site Scripting (XSS) vulnerability in adm\_user parameter in Gila CMS version 1.11.3, allows remote attackers to execute arbitrary code (no CVSS, gilacms/gila)
- [CVE-2020-23595](https://cve.now/CVE-2020-23595.md): Cross Site Request Forgery (CSRF) vulnerability in yzmcms version 5.6, allows remote attackers to escalate privileges and gain sensitive inf (no CVSS)
- [CVE-2020-24075](https://cve.now/CVE-2020-24075.md): Cross Site Scripting (XSS) vulnerability in Name Input Field in Contact Us form in Laborator Kalium before 3.0.4, allows remote attackers to (no CVSS)
- [CVE-2020-24187](https://cve.now/CVE-2020-24187.md): An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service (DoS) (Null Poin (no CVSS)
- [CVE-2020-24221](https://cve.now/CVE-2020-24221.md): An issue was discovered in GetByte function in miniupnp ngiflib version 0.4, allows local attackers to cause a denial of service (DoS) via c (no CVSS)
- [CVE-2020-24222](https://cve.now/CVE-2020-24222.md): Buffer Overflow vulnerability in jfif\_decode() function in rockcarry ffjpeg through version 1.0.0, allows local attackers to execute arbitra (no CVSS)
- [CVE-2020-24804](https://cve.now/CVE-2020-24804.md): Plaintext Password vulnerability in AddAdmin.py in cms-dev/cms v1.4.rc1, allows attackers to gain sensitive information via audit logs. (no CVSS)
- [CVE-2020-24872](https://cve.now/CVE-2020-24872.md): Cross Site Scripting (XSS) vulnerability in backend/pages/modify.php in Lepton-CMS version 4.7.0, allows remote attackers to execute arbitra (no CVSS)
- [CVE-2020-24904](https://cve.now/CVE-2020-24904.md): An issue was discovered in attach parameter in GNOME Gmail version 2.5.4, allows remote attackers to gain sensitive information via crafted (no CVSS)
- [CVE-2020-24922](https://cve.now/CVE-2020-24922.md): Cross Site Request Forgery (CSRF) vulnerability in xxl-job-admin/user/add in xuxueli xxl-job version 2.2.0, allows remote attackers to execu (no CVSS, com.xuxueli:xxl-job)
- [CVE-2020-24950](https://cve.now/CVE-2020-24950.md): SQL Injection vulnerability in file Base\_module\_model.php in Daylight Studio FUEL-CMS version 1.4.9, allows remote attackers to execute arbi (no CVSS)
- [CVE-2020-25915](https://cve.now/CVE-2020-25915.md): Cross Site Scripting (XSS) vulnerability in UserController.php in ThinkCMF version 5.1.5, allows attackers to execute arbitrary code via cra (no CVSS, thinkcmf/thinkcmf)
- [CVE-2020-27449](https://cve.now/CVE-2020-27449.md): Cross Site Scripting (XSS) vulnerability in Query Report feature in Zoho ManageEngine Password Manager Pro version 11001, allows remote atta (no CVSS)
- [CVE-2020-27514](https://cve.now/CVE-2020-27514.md): Directory Traversal vulnerability in delete function in admin.api.TemplateController in ZrLog version 2.1.15, allows remote attackers to del (no CVSS)
- [CVE-2020-27544](https://cve.now/CVE-2020-27544.md): An issue was discovered in FoldingAtHome Client Advanced Control GUI before commit 9b619ae64443997948a36dda01b420578de1af77, allows remote a (no CVSS)
- [CVE-2020-28717](https://cve.now/CVE-2020-28717.md): Cross Site Scripting (XSS) vulnerability in content1 parameter in demo.jsp in kindsoft kindeditor version 4.1.12, allows attackers to execut (no CVSS)
- [CVE-2020-28840](https://cve.now/CVE-2020-28840.md): Buffer Overflow vulnerability in jpgfile.c in Matthias-Wandel jhead version 3.04, allows local attackers to execute arbitrary code and cause (no CVSS)
- [CVE-2020-28848](https://cve.now/CVE-2020-28848.md): CSV Injection vulnerability in ChurchCRM version 4.2.0, allows remote attackers to execute arbitrary code via crafted CSV file. (no CVSS)
- [CVE-2020-28849](https://cve.now/CVE-2020-28849.md): Cross Site Scripting (XSS) vulnerability in ChurchCRM version 4.2.1, allows remote attckers to execute arbitrary code and gain sensitive inf (no CVSS)
- [CVE-2020-35139](https://cve.now/CVE-2020-35139.md): An issue was discovered in OFPBundleCtrlMsg in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of servic (no CVSS, ryu)
- [CVE-2020-35141](https://cve.now/CVE-2020-35141.md): An issue was discovered in OFPQueueGetConfigReply in parser.py in Faucet SDN Ryu version 4.34, allows remote attackers to cause a denial of (no CVSS, ryu)
- [CVE-2020-35990](https://cve.now/CVE-2020-35990.md): Buffer Overflow vulnerability in cFilenameInit parameter in browseForDoc function in Foxit Software Foxit PDF Reader version 10.1.0.37527, a (no CVSS)
- [CVE-2020-36023](https://cve.now/CVE-2020-36023.md): An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf (no CVSS)
- [CVE-2020-36024](https://cve.now/CVE-2020-36024.md): An issue was discovered in freedesktop poppler version 20.12.1, allows remote attackers to cause a denial of service (DoS) via crafted .pdf (no CVSS)
- [CVE-2020-36034](https://cve.now/CVE-2020-36034.md): SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, esc (no CVSS)
- [CVE-2020-36037](https://cve.now/CVE-2020-36037.md): An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor (no CVSS)
- [CVE-2020-36082](https://cve.now/CVE-2020-36082.md): File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via craft (no CVSS)
- [CVE-2020-36136](https://cve.now/CVE-2020-36136.md): SQL Injection vulnerability in cskaza cszcms version 1.2.9, allows attackers to gain sensitive information via pm\_sendmail parameter in csz\_ (no CVSS)
- [CVE-2020-36138](https://cve.now/CVE-2020-36138.md): An issue was discovered in decode\_frame in libavcodec/tiff.c in FFmpeg version 4.3, allows remote attackers to cause a denial of service (Do (no CVSS)
- [CVE-2021-25786](https://cve.now/CVE-2021-25786.md): An issue was discovered in QPDF version 10.0.4, allows remote attackers to execute arbitrary code via crafted .pdf file to Pl\_ASCII85Decoder (no CVSS)
- [CVE-2021-25856](https://cve.now/CVE-2021-25856.md): An issue was discovered in pcmt superMicro-CMS version 3.11, allows attackers to delete files via crafted image file in images.php. (no CVSS)
- [CVE-2021-25857](https://cve.now/CVE-2021-25857.md): An issue was discovered in pcmt superMicro-CMS version 3.11, allows authenticated attackers to execute arbitrary code via the font\_type para (no CVSS)
- [CVE-2021-26504](https://cve.now/CVE-2021-26504.md): Directory Traversal vulnerability in Foddy node-red-contrib-huemagic version 3.0.0, allows remote attackers to gain sensitive information vi (no CVSS)
- [CVE-2021-26505](https://cve.now/CVE-2021-26505.md): Prototype pollution vulnerability in MrSwitch hello.js version 1.18.6, allows remote attackers to execute arbitrary code via hello.utils.ext (no CVSS, hellojs)
- [CVE-2021-27523](https://cve.now/CVE-2021-27523.md): An issue was discovered in open-falcon dashboard version 0.2.0, allows remote attackers to gain, modify, and delete sensitive information vi (no CVSS)
- [CVE-2021-27524](https://cve.now/CVE-2021-27524.md): Cross Site Scripting (XSS) vulnerability in margox braft-editor version 2.3.8, allows remote attackers to execute arbitrary code via the emb (no CVSS, braft-editor)
- [CVE-2021-28025](https://cve.now/CVE-2021-28025.md): Integer Overflow vulnerability in qsvghandler.cpp in Qt qtsvg versions 5.15.1, 6.0.0, 6.0.2, and 6.2, allows local attackers to cause a deni (no CVSS)
- [CVE-2021-28411](https://cve.now/CVE-2021-28411.md): An issue was discovered in getRememberedSerializedIdentity function in CookieRememberMeManager class in lerry903 RuoYi version 3.4.0, allows (no CVSS)
- [CVE-2021-28427](https://cve.now/CVE-2021-28427.md): Buffer Overflow vulnerability in XNView version 2.49.3, allows local attackers to execute arbitrary code via crafted TIFF file. (CVSS 7.8)
- [CVE-2021-28429](https://cve.now/CVE-2021-28429.md): Integer overflow vulnerability in av\_timecode\_make\_string in libavutil/timecode.c in FFmpeg version 4.3.2, allows local attackers to cause a (no CVSS)
- [CVE-2021-28835](https://cve.now/CVE-2021-28835.md): Buffer Overflow vulnerability in XNView before 2.50, allows local attackers to execute arbitrary code via crafted GEM bitmap file. (CVSS 7.8)
- [CVE-2021-29057](https://cve.now/CVE-2021-29057.md): An issue was discovered in StaticPool in SUCHMOKUO node-worker-threads-pool version 1.4.3, allows attackers to cause a denial of service. (no CVSS, node-worker-threads-pool)
- [CVE-2021-29378](https://cve.now/CVE-2021-29378.md): SQL Injection in pear-admin-think version 2.1.2, allows attackers to execute arbitrary code and escalate privileges via crafted GET request (no CVSS)
- [CVE-2021-3236](https://cve.now/CVE-2021-3236.md): vim 8.2.2348 is affected by null pointer dereference, allows local attackers to cause a denial of service (DoS) via the ex\_buffer\_all method (no CVSS)
- [CVE-2023-22955](https://cve.now/CVE-2023-22955.md): An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. (no CVSS)
- [CVE-2023-22956](https://cve.now/CVE-2023-22956.md): An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. (no CVSS)
- [CVE-2023-22957](https://cve.now/CVE-2023-22957.md): An issue was discovered in libac\_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. (no CVSS)
- [CVE-2023-40256](https://cve.now/CVE-2023-40256.md): A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the Rab (CVSS 9.8)
- [CVE-2023-40260](https://cve.now/CVE-2023-40260.md): EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username and p (no CVSS)
- [CVE-2023-40267](https://cve.now/CVE-2023-40267.md): GitPython before 3.1.32 does not block insecure non-multi options in clone and clone\_from. (no CVSS, gitpython)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2023-08-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.