Intel vulnerabilities
280 CVEs and advisories name Intel as an affected vendor, 1 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2024-8105Insecure Platform Key (PK) used in UEFI system firmware signature
- CVE-2023-50197Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability
- CVE-2023-42099Intel Driver & Support Assistant Link Following Local Privilege Escalation Vulnerability
- CVE-2024-3411Insufficient Randomness When Validating an IPMI Authenticated Session
- CVE-2023-4324Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers
- CVE-2023-4325Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
- CVE-2023-4326Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites
- CVE-2023-4329Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribute
- CVE-2023-4331Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
- CVE-2023-4332Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file
- CVE-2023-4334Broadcom RAID Controller Web server (nginx) is serving private files without any authentication
- CVE-2023-4335Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
- CVE-2023-4336Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
- CVE-2023-4337Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation
- CVE-2023-4338Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers
- CVE-2023-4339Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
- CVE-2023-4340Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file
- CVE-2023-4341Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI
- CVE-2023-4342Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy
- CVE-2023-4343Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
- CVE-2023-4344Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
- CVE-2023-4323Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup
- CVE-2023-4345Broadcom RAID Controller web interface is vulnerable client-side control bypass
- CVE-2022-29901Arbitrary Memory Disclosure through CPU Side-Channel Attacks (Retbleed)
- CVE-2020-0583Improper access control in the subsystem for Intel(R) Smart Sound Technology may allow an authenticated user to potentially enable escalatio
- CVE-2020-0551Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable infor
- CVE-2020-0550Improper data forwarding in some data cache for some Intel(R) Processors may allow an authenticated user to potentially enable information d
- CVE-2020-0530Improper buffer restrictions in firmware for Intel(R) NUC may allow an authenticated user to potentially enable escalation of privilege via
- CVE-2020-0574Improper configuration in block design for Intel(R) MAX(R) 10 FPGA all versions may allow an authenticated user to potentially enable escala
- CVE-2020-0567Improper input validation in Intel(R) Graphics Drivers before version 26.20.100.7212 may allow an authenticated user to enable denial of ser