Browse CVEs

HIGH 7.8 CVE-2023-39535 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of thi… Aptio V Mitigation only Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-39536 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of thi… Aptio V Mitigation only Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-39537 AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper input validation via the local network. A successful exploit of thi… Aptio V No fix yet Fix from $1,9502023-11-14 HIGH 8.8 CVE-2023-5528 A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to ad… Kubernetes 1.25.16 / 1.26.11+ Fix from $1,9502023-11-14 CRITICAL 9.8 CVE-2023-36049EPSS 13% .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability .net Framework 6.0.25 / 7.0.14+ Fix from $2,3002023-11-14 MEDIUM 6.7 CVE-2023-34431 Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilege via l… Server Board M70klp2sb Firmware 01.04.0022 / 02.01.0015+ Fix from $1,6002023-11-14 HIGH 8.8 CVE-2023-36860 Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network ac… Unison Software 20.14.2.3053 / 20.14.4244+ Fix from $1,9502023-11-14 MEDIUM 6.5 CVE-2023-38131 Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network acc… Unison Software 20.14.2.3053 / 20.14.4244+ Fix from $1,6002023-11-14 HIGH 8.8 CVE-2023-32641 Improper input validation in firmware for Intel(R) QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service vi… Quickassist Technology 1.0.40-00004+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-31320 Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in denial of… Radeon Software 23.q3 / 23.7.1+ Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-31203 Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauth… Openvino Model Server 2022.3+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-27519 Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalation of privi… Optane Memory H20 With Solid State Storage Firmware Mitigation only Fix from $1,9502023-11-14 HIGH 7.5 CVE-2023-22337 Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. Unison Software 20.14.2.3053 / 20.14.4244+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2022-45469 Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local acce… Unison Software 20.14.2.3053 / 20.14.4244+ Fix from $1,9502023-11-14 MEDIUM 6.7 CVE-2022-33945 Improper input validation in some Intel(R) Server board and Intel(R) Server System BIOS firmware may allow a privileged user to potentially enable es… Server Board M70klp2sb Firmware 01.04.0022 / 02.01.0015+ Fix from $1,6002023-11-14 CRITICAL 9.8 CVE-2022-23820 Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution. Ryzen 9 3900 Firmware Mitigation only Fix from $2,3002023-11-14 MEDIUM 6.7 CVE-2022-24379 Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user to potenti… Server Board M70klp2sb Firmware 01.04.0022+ Fix from $1,6002023-11-14 HIGH 7.8 CVE-2023-36719 Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability Windows 10 1507 10.0.10240.20308 / 10.0.14393.6452+ Fix from $1,9502023-11-14 HIGH 7.8 CVE-2023-36407 Windows Hyper-V Elevation of Privilege Vulnerability Windows 11 21h2 10.0.22000.2600 / 10.0.22621.2715+ Fix from $1,9502023-11-14 MEDIUM 5.5 CVE-2023-36406 Windows Hyper-V Information Disclosure Vulnerability Windows 11 21h2 10.0.22000.2600 / 10.0.22621.2715+ Fix from $1,6002023-11-14 HIGH 8.0 CVE-2023-36021 Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability On Prem Data Gateway 3000.198.9+ Fix from $1,9502023-11-14 MEDIUM 6.3 CVE-2023-6073 Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 (and other vehicles of the VW Group with the same ha… Id.3 Firmware 3.2+ Fix from $1,6002023-11-10 MEDIUM 5.5 CVE-2023-45167 IBM AIX's 7.3 Python implementation could allow a non-privileged local user to exploit a vulnerability to cause a denial of service. IBM X-Force ID:… Vios No fix yet Fix from $1,6002023-11-10 HIGH 7.5 CVE-2023-5079 Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in info… Lecloud 7.0.25.99+ Fix from $1,9502023-11-08 MEDIUM 6.7 CVE-2023-43570 A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to… Ideacentre C5 14imb05 Firmware Mitigation only Fix from $1,6002023-11-08 HIGH 8.8 CVE-2023-47107 PILOS is an open source front-end for BigBlueButton servers with a built-in load balancer. The password reset component deployed within PILOS uses th… Pilos 2.3.0+ Fix from $1,9502023-11-08 CRITICAL 9.8 CVE-2023-6012 An improper input validation vulnerability has been found in Lanaccess ONSAFE MonitorHM affecting version 3.7.0. This vulnerability could lead a remo… Onsafe Monitorhm Mitigation only Fix from $2,3002023-11-08 MEDIUM 5.3 CVE-2023-46763 Vulnerability of background app permission management in the framework module. Successful exploitation of this vulnerability may cause background app… Emui Mitigation only Fix from $1,6002023-11-08 HIGH 8.8 CVE-2023-39913 Deserialization of Untrusted Data, Improper Input Validation vulnerability in Apache UIMA Java SDK, Apache UIMA Java SDK, Apache UIMA Java SDK, Apach… Uimaj 3.5.0+ Fix from $1,9502023-11-08 MEDIUM 5.5 CVE-2023-42527 Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive … Android Mitigation only Fix from $1,6002023-11-07