CVEs published in May 2019
1,381 vulnerabilities, 265 critical, 14 exploited.
- intel converged security management engine firmwareBuffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user...6.7 Medium
- intel converged security management engine firmwareBuffer overflow in subsystem in Intel(R) CSME before version 12.0.35 may allow an unauthenticated...9.8 Critical
- intel xeon bronze processors firmware, xeon d-1513n firmware, xeon d-1518 firmware +45 more +47 moreInsufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor...6.7 Medium
- intel atom 230 firmware, atom 330 firmware, atom x5-e3930 firmware +25 more +27 moreInsufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R)...4.4 Medium
- intel hns2400lp firmware, hns2600bpb24 firmware, hns2600bpb firmware +89 more +91 moreBuffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R...6.7 Medium
- intel graphics driverAn out of bound read in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka...4.4 Medium
- intel graphics driverInsufficient input validation in KMD module for Intel(R) Graphics Driver before version 10.18.14...5.5 Medium
- intel graphics driverA race condition in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and...4.7 Medium
- intel graphics driverInsufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36...5.5 Medium
- intel server platform services firmwareInsufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05...6.8 Medium
- intel converged security management engine firmware, trusted execution engine firmware +1 moreLogic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE...6.8 Medium
- intel active management technology firmwareInsufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35...4.9 Medium
- intel active management technology firmwareOut of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65,...8.0 High
- intel active management technology firmwareInsufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65...4.3 Medium
- intel converged security and management engineInsufficient data sanitization vulnerability in HECI subsystem for Intel(R) CSME before versions...4.4 Medium
- intel active management technology firmwareInsufficient input validation vulnerability in subsystem for Intel(R) AMT before versions 11.8.65...6.8 Medium
- intel converged security and management engine, trusted execution technology +1 moreCode injection vulnerability in installer for Intel(R) CSME before versions 11.8.65, 11.11.65, 11...7.8 High
- intel server platform services, converged security and management engine +1 moreInsufficient access control vulnerability in subsystem for Intel(R) CSME before version 12.0.35,...7.1 High
- intel server platform servicesImproper data sanitization vulnerability in subsystem in Intel(R) SPS before versions SPS_E5_04...6.7 Medium
- intel converged security management engine firmware, trusted execution engine firmware +1 moreInsufficient access control vulnerability in Dynamic Application Loader software for Intel(R)...7.8 High
- intel proset\/wireless wifiImproper directory permissions in the installer for Intel(R) PROSet/Wireless WiFi Software...7.8 High
- intel corporation intel(r) driver & support assistant, intel driver \& support assistant +1 moreInsufficient input validation in Intel(R) Driver & Support Assistant version 19.3.12.3 and before...4.4 Medium
- intel corporation intel(r) driver & support assistant, intel driver \& support assistant +1 moreInsufficient access control in Intel(R) Driver & Support Assistant version 19.3.12.3 and before...4.4 Medium
- intel nuc kit firmwareInsufficient input validation in system firmware for Intel (R) NUC Kit may allow an authenticated...7.8 High
- intel scs discovery utilityUnquoted service path in the installer for the Intel(R) SCS Discovery Utility version 12.0.0.129...6.7 Medium
- intel uniteA logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote...9.8 Critical
- intel quartus ii, quartus prime +1 moreImproper directory permissions in the installer for Intel(R) Quartus(R) software may allow an...7.8 High
- intel acu wizardImproper directory permissions in Intel(R) ACU Wizard version 12.0.0.129 and earlier may allow an...7.8 High
- intel uniteData Corruption in Intel Unite(R) Client before version 3.3.176.13 may allow an unauthenticated...7.5 High
- gitlabAn Incorrect Access Control issue was discovered in GitLab Community and Enterprise Edition 6.0...9.1 Critical
- ovirt cockpit-ovirtDuring HE deployment via cockpit-ovirt, cockpit-ovirt generates an ansible variable file `/var...5.6 Medium
- ministry of internal affairs and communications electronic reception and examination of application for radio licenses offline, soumu electronic reception and examination of application for radio licenses +1 moreUntrusted search path vulnerability in Electronic reception and examination of application for...7.8 High
- ministry of internal affairs and communications installer of electronic reception and examination of application for radio licenses online, soumu electronic reception and examination of application for radio licenses +1 moreUntrusted search path vulnerability in Installer of Electronic reception and examination of...7.8 High
- create s.d co., ltd. sd official app for android, create-sd create sd +1 moreCREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass...5.4 Medium
- east japan railway company jr east japan train operation information push notification app for android, jreast jr east japan +1 moreJR East Japan train operation information push notification App for Android version 1.2.4 and...9.1 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreOpen redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information...9.8 Critical
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to...6.1 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreDirectory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated...5.4 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreSQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with...7.2 High
- cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction...4.3 Medium
- Show moreLoading…