CVEs published February 14, 2024
170 CVEs were published on February 14, 2024: 15 critical, 47 high.
- Published
- 170
- Critical
- 15
- High
- 47
- Medium
- 97
- Low
- 11
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 40
Most affected products
- Intel(R) Thunderbolt(TM) DCH drivers for Windows
- 20
- F5 BIG-IP
- 14
- Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- 10
- SHARP Energy Management Controller with Cloud Services
- 7
- Palo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- 5
- Intel(R) VROC software
- 4
- contiki-ng
- 3
- Intel(R) DSA software
- 3
- Intel(R) XTU software
- 3
- Certain HP Desktop PC products
- 2
Critical 15
- CVE-2023-6441SQLi in UNI-PA's University Information SystemUNI-PA University Marketing & Computer Internet Trade Unive…
- CVE-2024-23789Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-adjacent unauthenticated attackeSHARP Energy Management Controller with Cloud Services
- CVE-2024-23788Server-side request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier alloSHARP Energy Management Controller with Cloud Services
- CVE-2024-23786Cross-site scripting vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a neSHARP Energy Management Controller with Cloud Services
- CVE-2024-24691Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows - Improper Input ValidationZoom Video Communications Zoom Desktop Client for Windows,…
- CVE-2024-243004ipnet EAP-767 v3.42.00 is vulnerable to Incorrect Access Control.
- CVE-2024-25209Barangay Population Monitoring System 1.0 was discovered to contain a SQL injection vulnerability via the resident parameter at /endpoint/de
- CVE-2024-25210Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the expense parameter at /endpoint/delete_expense.ph
- CVE-2024-25211Simple Expense Tracker v1.0 was discovered to contain a SQL injection vulnerability via the category parameter at /endpoint/delete_category.
- CVE-2024-25214An issue in Employee Managment System v1.0 allows attackers to bypass authentication via injecting a crafted payload into the E-mail and Pas
- CVE-2024-25215Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php.
- CVE-2024-25216Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the mailud parameter at /aprocess.php.
- CVE-2024-25220Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the taskID parameter at /TaskManager/EditTask.php.
- CVE-2024-25222Task Manager App v1.0 was discovered to contain a SQL injection vulnerability via the projectID parameter at /TaskManager/EditProject.php.
- CVE-2024-25223Simple Admin Panel App v1.0 was discovered to contain a SQL injection vulnerability via the orderID parameter at /adminView/viewEachOrder.ph
High 47
- CVE-2023-6138A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of prCertain HP Workstation PCs
- CVE-2024-1367Command Injection Vulnerability in Tenable Security CenterTenable Security Center
- CVE-2024-1482Improper Authorization in GitHub Enterprise Server allowed unauthorized workflow execution GitHub Enterprise Server
- CVE-2023-50926Unvalidated DIO prefix info length in RPL-Lite in Contiki-NGcontiki-ng
- CVE-2023-50927Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NGcontiki-ng
- CVE-2023-48229Out-of-bounds write in the radio driver for Contiki-NG nRF platformscontiki-ng
- CVE-2024-0568 CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communicatioSchneider Electric Harmony Control Relay RMNF22TB30 · Schne…
- CVE-2023-27975 CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Schneider Electric EcoStruxure Control Expert · Schneider E…
- CVE-2023-6408 CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a dSchneider Electric Modicon M340 CPU · Schneider Electric… +2
- CVE-2023-6409 CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with applicatiSchneider Electric EcoStruxure Control Expert · Schneider E…
- CVE-2024-23982BIG-IP PEM vulnerabilityF5 BIG-IP
- CVE-2024-24990NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2024-24989NGINX HTTP/3 QUIC vulnerabilityF5 NGINX Plus · F5 NGINX Open Source
- CVE-2024-21763BIG-IP AFM vulnerabilityF5 BIG-IP
- CVE-2024-23805F5 Application Visibility and Reporting module and BIG-IP Advanced WAF/ASM vulnerabilityF5 BIG-IP
- CVE-2024-21789BIG-IP ASM and Advanced WAF vulnerabilityF5 BIG-IP
- CVE-2024-23308BIG-IP Advanced WAF and ASM vulnerabilityF5 BIG-IP
- CVE-2024-24775BIG-IP TMM vulnerabilityF5 BIG-IP
- CVE-2024-23306BIG-IP Next CNF & SPK vulnerabilityF5 BIG-IP Next SPK · F5 BIG-IP Next CNF
- CVE-2024-23314BIG-IP HTTP/2 vulnerabilityF5 BIG-IP
- CVE-2024-22093Appliance mode iControl REST vulnerabilityF5 BIG-IP
- CVE-2024-23979BIG-IP SSL Client Certificate LDAP and CRLDP Authentication profiles vulnerabilityF5 BIG-IP
- CVE-2024-21849BIG-IP Websockets vulnerabilityF5 BIG-IP
- CVE-2024-21771F5 AFM Signature Matching VulnerabilityF5 BIG-IP
- CVE-2024-22389BIG-IP iControl REST API VulnerabilityF5 BIG-IP
- CVE-2023-5123Improper Path Sanitization in JSON Datasource Plugingrafana-json-datasource
- CVE-2023-39941Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable deniaIntel(R) SUR software
- CVE-2023-35121Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version Intel(R) oneAPI DPC++/C++ Compiler software
- CVE-2023-39425Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalatioIntel(R) DSA software
- CVE-2023-34351Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of serviIntel(R) PCM software
- CVE-2023-33875Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-22342Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to poteIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-25777Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-22293Improper access control in the Intel(R) Thunderbolt(TM) DCH drivers for Windows may allow an authenticated user to potentially enable escalaIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2024-23787Path traversal vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows a network-SHARP Energy Management Controller with Cloud Services
- CVE-2024-23783Improper authentication vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allows aSHARP Energy Management Controller with Cloud Services
- CVE-2023-44283 In Dell SupportAssist for Home PCs (between v3.0 and v3.14.1) and SupportAssist for Business PCs (between v3.0 and v3.4.1), a security concDell SupportAssist for Home PCs · Dell SupportAssist for Bu…
- CVE-2023-25535 Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerabilityDell SupportAssist Client Consumer
- CVE-2023-48987Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to exe
- CVE-2023-50387Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of ser
- CVE-2023-50868The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a den
- CVE-2024-24301Command Injection vulnerability discovered in 4ipnet EAP-767 device v3.42.00 within the web interface of the device allows attackers with va
- CVE-2024-25165A global-buffer-overflow vulnerability was found in SWFTools v0.9.2, in the function LineText at lib/swf5compiler.flex.
- CVE-2024-25212Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /delete.php.
- CVE-2024-25213Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /edit.php.
- CVE-2024-25217Online Medicine Ordering System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /omos/?p=products/view_
- CVE-2024-25301Redaxo v5.15.1 was discovered to contain a remote code execution (RCE) vulnerability via the component /pages/templates.php.
Medium, low and unrated 108
- CVE-2024-25620Dependency management path traversal in helmhelm · helm.sh/helm/v3
- CVE-2022-48220Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusioCertain HP Desktop PC products
- CVE-2022-48219Potential vulnerabilities have been identified in certain HP Desktop PC products using the HP TamperLock feature, which might allow intrusioCertain HP Desktop PC products
- CVE-2023-49721An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD.Canonical LXD
- CVE-2023-48733An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2.Canonical Ubuntu EDK II
- CVE-2024-1471HTML Injection VulnerabilityTenable Security Center
- CVE-2024-25617Denial of Service in HTTP Header parser in squid proxysquid-cache squid
- CVE-2024-25619Destroying OAuth Applications doesn't notify Streaming of Access Tokens being destroyed in mastodonmastodon
- CVE-2024-25618External OpenID Connect Account Takeover by E-Mail Change in mastodonmastodon
- CVE-2024-0011PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in Captive Portal AuthenticationPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0010PAN-OS: Reflected Cross-Site Scripting (XSS) Vulnerability in GlobalProtect PortalPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0009PAN-OS: Improper IP Address Verification in GlobalProtect GatewayPalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0008PAN-OS: Insufficient Session Expiration Vulnerability in the Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-0007PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Panorama Web InterfacePalo Alto Networks PAN-OS · Palo Alto Networks Prisma Ac… +1
- CVE-2024-23603BIG-IP Advanced WAF and ASM Configuration utility vulnerability F5 BIG-IP
- CVE-2024-24966F5OS vulnerabilityF5OS - Appliance · F5OS - Chassis
- CVE-2024-21782BIG-IP and BIG-IQ secure copy vulnerabilityF5 BIG-IP · F5 BIG-IQ
- CVE-2024-23607F5OS QKView utility vulnerabilityF5OS - Appliance · F5OS - Chassis
- CVE-2024-23976BIG-IP Appliance mode iAppsLX vulnerabilityF5 BIG-IP
- CVE-2023-5122SSRF in CSV Datasource Plugingrafana-csv-datasource
- CVE-2023-46186IBM Jazz for Service Management information disclosureIBM Jazz for Service Management
- CVE-2023-42776Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potenIntel(R) SGX DCAP software for Windows
- CVE-2023-40156Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable Intel(R) SSU software
- CVE-2023-41091Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user to potentially enableIntel(R) MPI Library Software
- CVE-2023-39932Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enablIntel(R) SUR for Gameplay Software
- CVE-2023-40154Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enIntel(R) SUR for Gameplay Software
- CVE-2023-29153Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentiIntel(R) SPS firmware
- CVE-2023-41252Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potenIntel(R) QAT software drivers for Windows
- CVE-2023-38566Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalatiIntel(R) ISPC software
- CVE-2023-33870Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially enIntel(R) Ethernet tools and driver install software
- CVE-2023-39432Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticateIntel(R) Ethernet tools and driver install software,
- CVE-2023-36493Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escIntel(R) SDK for OpenCL(TM) Applications software
- CVE-2023-29162Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 maIntel(R) C++ Compiler Classic
- CVE-2023-35060Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to poteIntel(R) Battery Life Diagnostic Tool software
- CVE-2023-40161Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user to potentially enablIntel Unite(R) Client software
- CVE-2023-28745Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enabIntel(R) QSFP+ Configuration Utility software
- CVE-2023-24591Uncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentiIntel(R) Binary Configuration Tool software
- CVE-2023-25073Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial ofIntel(R) DSA software
- CVE-2023-35062Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation ofIntel(R) DSA software
- CVE-2023-41090Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege viIntel(R) MAS software
- CVE-2023-36490Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of serIntel(R) MAS software
- CVE-2023-35769Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalaIntel(R) CIP software
- CVE-2023-38135Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of privilege via local acceIntel(R) PM software
- CVE-2023-28715Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated usIntel(R) oneAPI Toolkit and component software installers
- CVE-2023-32618Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated uIntel(R) oneAPI Toolkit and component software installers
- CVE-2023-38561Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalatIntel(R) XTU software
- CVE-2023-28407Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalaIntel(R) XTU software
- CVE-2023-32647Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalatIntel(R) XTU software
- CVE-2023-35003Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation oIntel(R) VROC software
- CVE-2023-34315Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enableIntel(R) VROC software
- CVE-2023-32646Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enaIntel(R) VROC software
- CVE-2023-31271Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalIntel(R) VROC software
- CVE-2023-27517Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an aIntel(R) Optane(TM) PMem software
- CVE-2023-22311Improper access control in some Intel(R) Optane(TM) PMem 100 Series Management Software before version 01.00.00.3547 may allow an authenticaIntel(R) Optane(TM) PMem 100 Series Management Software
- CVE-2023-26586Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticatIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-32644Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unaIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-32651Improper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.24Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-35061Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthentIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-34983Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-32642Insufficient adherence to expected conventions for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.24Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-25951Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-28720Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-28374Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthIntel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi soft…
- CVE-2023-25174Improper access control in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentialIntel(R) Chipset Driver Software
- CVE-2023-28739Incorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potIntel(R) Chipset Driver Software
- CVE-2023-25945Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escaIntel(R) OFU software
- CVE-2023-31189Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable eIntel(R) Server Product OpenBMC firmware
- CVE-2023-32280Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated Intel(R) Server Product OpenBMC firmware
- CVE-2023-41231Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0 may allow an authenticated user to potentialACAT software maintained by Intel
- CVE-2023-30767Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enTensorFlow
- CVE-2023-28396Improper access control in firmware for some Intel(R) Thunderbol(TM) Controllers versions before 41 may allow a privileged user to enable deIntel(R) Thunderbol(TM) Controllers versions
- CVE-2023-26591Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potenIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-26596Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27303Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-26592Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated userIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27300Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to pIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27307Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to pIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27301Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-24463Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to poIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-27308Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potenIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-26585Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-25769Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated userIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-22848Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-24589Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potenIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-24481Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-22390Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to pIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-24542Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user tIntel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-25779Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2024-23952Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb (version range fix for CVE-2023-46104)Apache Software Foundation Apache Superset
- CVE-2024-23785Cross-site request forgery vulnerability in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier allowSHARP Energy Management Controller with Cloud Services
- CVE-2024-23784Improper access control vulnerability exists in Energy Management Controller with Cloud Services JH-RVB1 /JH-RV11 Ver.B0.1.9.1 and earlier, SHARP Energy Management Controller with Cloud Services
- CVE-2023-44294 In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern hDell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2023-44293 In Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (between v5.10.00.00 and v5.18.00.00), a security concern hDell Secure Connect Gateway-Application · Dell Secure Conne…
- CVE-2023-39249 Dell SupportAssist for Business PCs version 3.4.0 contains a local Authentication Bypass vulnerability that allows locally authenticated noDell SupportAssist Client Consumer
- CVE-2024-22455Dell Mobility - E-Lab Navigator, version(s) 3.1.9, 3.2.0, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability.Dell Mobility - E-Lab Navigator
- CVE-2024-25125Absolute path traversal vulnerability in digdag servertreasure-data digdag · io.digdag:digdag-server
- CVE-2024-24690Zoom Clients - Improper Input ValidationZoom Video Communications Zoom Clients
- CVE-2023-48985Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker
- CVE-2023-48986Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker
- CVE-2024-25207Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function
- CVE-2024-25208Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function
- CVE-2024-25218A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2024-25219A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2024-25221A cross-site scripting (XSS) vulnerability in Task Manager App v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted
- CVE-2024-25224A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a cr
- CVE-2024-25225A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a cr
- CVE-2024-25226A cross-site scripting (XSS) vulnerability in Simple Admin Panel App v1.0 allows attackers to execute arbitrary web scripts or HTML via a cr
- CVE-2024-25300A cross-site scripting (XSS) vulnerability in Redaxo v5.15.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload