CVEs published in November 2024
4,194 vulnerabilities, 370 critical, 16 exploited.
- intel mas softwareUncontrolled search path element in some Intel(R) MAS software before version 2.5 may allow an...5.4 Medium
- No product listedImproper input validation in the Intel(R) Distribution of OpenVINO(TM) Model Server software...6.0 Medium
- intel oneapi math kernel libraryUncontrolled search path for some Intel(R) oneAPI Math Kernel Library software for Windows before...5.4 Medium
- intel virtual raid on cpuImproper Input Validation in some Intel(R) VROC software before version 8.6.0.2003 may allow an...2.4 Low
- intel vroc software, virtual raid on cpu +1 moreInsufficient control flow management in some Intel(R) VROC software before version 8.6.0.3001 may...6.9 Medium
- intel jam stapl player softwareImproper access control in some JAM STAPL Player software before version 2.6.1 may allow an...5.4 Medium
- intel high level synthesis compiler softwareUncontrolled search path in some Intel(R) High Level Synthesis Compiler software for Intel(R)...5.4 Medium
- No product listedCleartext transmission of sensitive information for some BigDL software maintained by Intel(R)...4.3 Medium
- No product listedImproper access control for some BigDL software maintained by Intel(R) before version 2.5.0 may...5.1 Medium
- No product listedImproper access control in some Intel(R) Granulate(TM) software before version 4.30.1 may allow a...4.8 Medium
- intel rendering toolkit softwareUncontrolled search path in some Intel(R) Rendering Toolkit software before version 2024.1.0 may...5.4 Medium
- intel ipp software, integrated performance primitives, oneapi base toolkit +2 moreUncontrolled search path for some Intel(R) IPP software for Windows before version 2021.12.0 may...5.4 Medium
- intel binary configuration tool software for windows binary configuration tool software for windowsUncontrolled search path for some Intel(R) Binary Configuration Tool software for Windows before...5.4 Medium
- intel binary configuration tool software for windows binary configuration tool software for windowsIncorrect default permissions for some Intel(R) Binary Configuration Tool software for Windows...5.4 Medium
- No product listedImproper buffer restrictions in some Intel(R) Graphics Drivers may allow an authenticated user to...6.9 Medium
- No product listedUntrusted pointer dereference in some Intel(R) Graphics Drivers may allow an authenticated user...6.9 Medium
- No product listedImproper buffer restrictions in some Intel(R) Graphics software may allow an authenticated user...4.8 Medium
- No product listedOut-of-bounds write in some Intel(R) Graphics Drivers may allow an authenticated user to...6.9 Medium
intel-mediasdkDebian,onevpl-intel-gpuDebian +1 moreNULL pointer dereference in some Intel(R) VPL software before version 24.1.4 may allow an...1.0 Low- yugabytedb anywhereAn information disclosure vulnerability exists in Yugabyte Anywhere, where the LDAP bind password...5.0 Medium
intel-mediasdkDebian,onevpl-intel-gpuDebian +1 moreOut-of-bounds read in some Intel(R) VPL software before version 24.1.4 may allow an authenticated...1.0 Lowintel-mediasdkDebian,onevpl-intel-gpuDebian +1 moreImproper buffer restrictions in some Intel(R) VPL software before version 24.1.4 may allow an...1.0 Lowintel-mediasdkDebian,onevpl-intel-gpuDebian +1 moreInteger overflow for some Intel(R) VPL software before version 24.1.4 may allow an authenticated...2.4 Low- intel 4th generation intel xeon processor scalable family, 5th generation intel xeon processor scalable family +1 moreExposure of resource to wrong sphere in some Intel(R) processors with Intel(R) ACTM may allow a...8.5 High
- intel 4th generation intel xeon processor scalable family, 5th generation intel xeon processor scalable family +1 moreTime-of-check Time-of-use Race Condition in some Intel(R) processors with Intel(R) ACTM may allow...8.5 High
- intel killer, proset\/wireless wifi +1 moreImproper initialization in firmware for some Intel(R) PROSet/Wireless Software and Intel(R)...4.6 Medium
intel-microcodeDebian,intel-ucodeAlpaquita,microcodeMageia +2 more +4 moreImproper finite state machines (FSMs) in the hardware logic in some 4th and 5th Generation Intel...5.7 Medium- jenkins shared library version override, jenkins project shared library version override plugin +1 moreScript security bypass vulnerability in Jenkins Shared Library Version Override Plugin8.8 High
- jenkins openid, openid connect authentication, jenkins project openid connect authentication plugin +2 moreSession fixation vulnerability in Jenkins OpenId Connect Authentication Plugin8.8 High
- jenkins authorize project, jenkins project authorize project plugin +1 moreStored XSS vulnerability in Jenkins Authorize Project Plugin8.0 High
- jenkins project pipeline: declarative plugin, jenkins pipeline\, jenkins project pipeline declaratrive plugin +2 moreRestarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin8.0 High
- jenkins groovy, jenkins project pipeline: groovy plugin, jenkins pipeline\ +2 moreRebuilding a run with revoked script approval allowed by Jenkins Pipeline: Groovy Plugin8.0 High
- jenkins script security, jenkins project script security plugin +1 moreMissing permission check in Jenkins Script Security Plugin4.3 Medium
- intel killer, proset\/wireless wifi +1 moreImproper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R)...6.8 Medium
firmware-nonfreeDebianImproper input validation for some Intel(R) Wireless Bluetooth(R) products for Windows before...6.8 Medium- intel killer, proset\/wireless wifi +1 moreImproper input validation in firmware for some Intel(R) PROSet/Wireless Software and Intel(R)...6.8 Medium
- No product listedInsufficient control flow management in UEFI firmware for some Intel(R) Xeon(R) Processors may...4.8 Medium
- intel 3rd generation intel xeon scalable processor family, 4th generation intel xeon processor scalable family, 5th generation intel xeon processor scalable family +1 more +3 moreIncorrect default permissions in some Intel(R) Xeon(R) processor memory controller configurations...8.5 High
- intel 3rd generation intel xeon scalable processor family, 4th generation intel xeon processor scalable family, 5th generation intel xeon processor scalable family +1 more +3 moreImproper conditions check in some Intel(R) Xeon(R) processor memory controller configurations...8.8 High
- intel tdx module softwareSensitive information in resource not removed before reuse in some Intel(R) TDX Seamldr module...8.3 High
- No product listedUncaught exception for some Intel(R) CST software before version 8.7.10803 may allow an...6.8 Medium
- drupal post file, post file project file +1 morePOST File - Critical - Cross Site Scripting, Arbitrary PHP code execution - SA-CONTRIB-2024-0605.4 Medium
- drupal post file, post file project file +1 morePOST File - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2024-0593.1 Low
- android framework, google android +1 moreIn shouldHideDocument of ExternalStorageProvider.java, there is a possible bypass of a file path...7.3 High
- google androidIn multiple locations, there is a possible cross-user image read due to a missing permission...5.0 Medium
- getumbrel umbrelRemote Code Execution (RCE) via Cross-Site Scripting (XSS) in Umbrel5.3 Medium
- grafana labs oss and enterprisePrivilege escalation vulnerability for Organizations in Grafana5.1 Medium
- decidimDecidim allows cross-site scripting (XSS) in the online or hybrid meeting embeds7.7 High
- symfony, symphony php framework process +1 moreSymphony has an Authentication Bypass via RememberMe7.5 High
- arm scp-firmware, scp firmware +1 moreThe transport_message_handler function in SCP-Firmware release versions 2.11.0-2.15.0 does not...8.0 High
- Show moreLoading…