Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-20039 State: PUBLISHED Published: 2025-05-13T21:01:48.189Z Last Updated: 2025-05-14T14:06:32.689Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software for Windows Problem Types: Denial of Service, CWE-362 Description: Race condition for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE ID: CVE-2025-20041 State: PUBLISHED Published: 2025-05-13T21:01:49.651Z Last Updated: 2025-05-14T14:06:15.597Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Graphics software for Intel(R) Arc™ graphics and Intel(R) Iris(R) Xe graphics before version 32.0.101.6325/32.0.101.6252 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.co
alation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE ID: CVE-2025-20042 State: PUBLISHED Published: 2025-03-04T03:44:27.295Z Last Updated: 2025-03-04T14:30:17.189Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-125 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-20043 State: PUBLISHED Published: 2025-05-13T21:01:51.214Z Last Updated: 2025-05-16T03:55:48.633Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) RealSense™ SDK software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) RealSense™ SDK software before version 2.56.2 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01305.html
CVE ID: CVE-2025-20044 State: PUBLISHED Published: 2025-08-12T17:29:04.317Z Last Updated: 2025-08-14T03:55:58.313Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: n/a Products: Intel(R) TDX Module firmware Problem Types: Escalation of Privilege, CWE-667 Description: Improper locking for some Intel(R) TDX Module firmware before version 1.5.13 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01245.html
CVE ID: CVE-2025-20045 State: PUBLISHED Published: 2025-02-05T17:31:02.132Z Last Updated: 2025-02-05T18:19:21.293Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-476 Description: When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/artic
TS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000138932
CVE ID: CVE-2025-20046 State: PUBLISHED Published: 2025-05-13T21:01:52.650Z Last Updated: 2025-05-14T14:05:40.281Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software for Windows Problem Types: Denial of Service, CWE-416 Description: Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE ID: CVE-2025-20047 State: PUBLISHED Published: 2025-05-13T21:01:54.168Z Last Updated: 2025-05-14T14:05:21.179Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Core™ Ultra Processors Problem Types: Escalation of Privilege, CWE-667 Description: Improper locking in the Intel(R) Integrated Connectivity I/O interface (CNVi) for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable escalation of privilege via physical access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01180.html
CVE ID: CVE-2025-20048 State: PUBLISHED Published: 2025-08-12T16:58:01.740Z Last Updated: 2025-08-14T03:56:12.919Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Trace Analyzer and Collector software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01266.html
CVE ID: CVE-2025-20049 State: PUBLISHED Published: 2025-02-28T17:04:11.352Z Last Updated: 2025-02-28T21:48:28.315Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N) Vendors: Dario Health Products: Dario Application Database and Internet-based Server Infrastructure Problem Types: CWE-79 Description: The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-058-01 - https://www.dariohealth.com/contact/
CVE ID: CVE-2025-20050 State: PUBLISHED Published: 2025-11-11T16:49:30.208Z Last Updated: 2025-11-13T04:55:18.574Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) CIP software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable local code execution. This result may potentially occur via local access when attack requirements are present without special internal
ution. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01328.html
CVE ID: CVE-2025-20051 State: PUBLISHED Published: 2025-02-24T07:27:23.182Z Last Updated: 2025-02-24T11:20:04.651Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-22 Description: Mattermost versions 10.4.x <= 10.4.1, 9.11.x <= 9.11.7, 10.3.x <= 10.3.2, 10.2.x <= 10.2.2 fail to properly validate input when patching and duplicating a board, which allows a user to read any arbitrary file on the system via duplicating a specially crafted block in Boards. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-20052 State: PUBLISHED Published: 2025-05-13T21:01:55.597Z Last Updated: 2025-05-14T17:19:37.016Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H) Vendors: n/a Products: Intel(R) Graphics software Problem Types: Denial of Service, CWE-284 Description: Improper access control for some Intel(R) Graphics software may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE ID: CVE-2025-20053 State: PUBLISHED Published: 2025-08-12T16:58:03.436Z Last Updated: 2025-11-03T17:32:05.343Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Xeon(R) Processor firmware with SGX enabled Problem Types: Escalation of Privilege, CWE-119 Description: Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html
CVE ID: CVE-2025-20054 State: PUBLISHED Published: 2025-05-13T21:01:56.981Z Last Updated: 2025-11-03T19:35:21.684Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Processors Problem Types: Denial of Service, CWE-248 Description: Uncaught exception in the core management mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01244.html
CVE ID: CVE-2025-20055 State: PUBLISHED Published: 2025-01-14T09:33:46.428Z Last Updated: 2025-01-14T15:46:40.322Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Y'S corporation Products: STEALTHONE D220, STEALTHONE D340 Problem Types: CWE-78 Description: OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340 provided by Y'S corporation. An attacker who can access the affected product may execute an arbitrary OS command. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%
.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%e3%83%bc%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%82%92%e3%83%aa%e3%83%aa%e3%83%bc%e3%82%b9%e8%87%b4/ - https://jvn.jp/en/vu/JVNVU99653331/
CVE ID: CVE-2025-20056 State: PUBLISHED Published: 2025-11-11T16:49:32.063Z Last Updated: 2025-11-12T20:02:33.033Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: n/a Products: Intel VTune Profiler Problem Types: Escalation of Privilege, CWE-20 Description: Improper input validation for some Intel VTune Profiler before version 2025.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable data manipulation. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and r
may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (low) and availability (low) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01355.html
CVE ID: CVE-2025-20057 State: PUBLISHED Published: 2025-05-13T21:01:58.613Z Last Updated: 2025-05-14T15:44:29.518Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform Problem Types: Denial of Service, CWE-400 Description: Uncontrolled resource consumption for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE ID: CVE-2025-20058 State: PUBLISHED Published: 2025-02-05T17:31:01.109Z Last Updated: 2025-02-12T20:51:34.243Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-400 Description: When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000140947
CVE ID: CVE-2025-20059 State: PUBLISHED Published: 2025-02-20T14:11:28.146Z Last Updated: 2025-02-20T14:27:23.298Z Vendors: Ping Identity Products: PingAM Java Policy Agent Problem Types: CWE-23 Description: Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://backstage.forgerock.com/knowledge/advisories/article/a61848355
CVE ID: CVE-2025-20060 State: PUBLISHED Published: 2025-02-28T16:51:20.410Z Last Updated: 2025-02-28T21:58:18.544Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dario Health Products: USB-C Blood Glucose Monitoring System Starter Kit Android Applications, Dario Application Database and Internet-based Server Infrastructure Problem Types: CWE-359 Description: An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android device via the Dario Health application database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-058-01 - https://www.dariohealth.com/contact/
CVE ID: CVE-2025-20061 State: PUBLISHED Published: 2025-01-29T19:52:43.495Z Last Updated: 2025-02-12T19:51:13.559Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mySCADA Products: myPRO Manager, myPRO Runtime Problem Types: CWE-78 Description: mySCADA myPRO does not properly neutralize POST requests sent to a specific port with email information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-01
CVE ID: CVE-2025-20062 State: PUBLISHED Published: 2025-05-13T21:02:00.152Z Last Updated: 2025-05-14T15:33:39.494Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software for Windows Problem Types: Denial of Service, CWE-416 Description: Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE ID: CVE-2025-20063 State: PUBLISHED Published: 2025-06-08T11:46:20.731Z Last Updated: 2025-06-09T03:33:04.168Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-843 Description: in OpenHarmony v5.0.3 and prior versions allow a local attacker cause apps crash through type confusion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-06.md
CVE ID: CVE-2025-20065 State: PUBLISHED Published: 2025-11-11T16:49:33.616Z Last Updated: 2025-11-12T20:02:27.176Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Display Virtualization for Windows OS software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Display Virtualization for Windows OS software before version 1797 within Ring 2: Device Drivers may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements ar
ttack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present without special internal knowledge and requires active user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01303.html
CVE ID: CVE-2025-20067 State: PUBLISHED Published: 2025-08-12T16:58:04.888Z Last Updated: 2025-08-12T18:25:53.025Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) CSME and Intel(R) SPS Problem Types: Information Disclosure, CWE-208 Description: Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01280.html
CVE ID: CVE-2025-20071 State: PUBLISHED Published: 2025-05-13T21:02:01.643Z Last Updated: 2025-05-14T15:30:41.492Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Graphics Drivers Problem Types: Denial of Service, CWE-476 Description: NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE ID: CVE-2025-20072 State: PUBLISHED Published: 2025-01-16T17:51:38.173Z Last Updated: 2025-01-16T19:01:25.308Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-704 Description: Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-20074 State: PUBLISHED Published: 2025-08-12T16:58:06.427Z Last Updated: 2025-08-14T03:56:15.158Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Connectivity Performance Suite software installers Problem Types: Escalation of Privilege, CWE-367 Description: Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01
t Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01286.html
CVE ID: CVE-2025-20075 State: PUBLISHED Published: 2025-02-17T23:57:07.153Z Last Updated: 2025-02-18T15:42:10.343Z Severity: HIGH (CVSS 7.2 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L) Vendors: JIP InfoBridge Co., Ltd. Products: FileMegane Problem Types: CWE-918 Description: Server-side request forgery (SSRF) vulnerability exists in FileMegane versions above 3.0.0.0 prior to 3.4.0.0. Executing arbitrary backend Web API requests could potentially lead to rebooting the services. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.info-brdg.co.jp/support/report/megane/sec20250201.html - https://jvn.jp/en/jp/JVN80527854/
CVE ID: CVE-2025-20076 State: PUBLISHED Published: 2025-05-13T21:02:03.160Z Last Updated: 2025-05-14T15:29:54.218Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: n/a Products: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform Problem Types: Escalation of Privilege, CWE-284 Description: Improper access control for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE ID: CVE-2025-20077 State: PUBLISHED Published: 2025-08-12T16:58:08.310Z Last Updated: 2025-08-12T18:27:01.630Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) reference server platforms Problem Types: Denial of Service, CWE-401 Description: Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some Intel(R) reference server platforms may allow a privileged user to enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01300.html
CVE ID: CVE-2025-20079 State: PUBLISHED Published: 2025-05-13T21:02:04.673Z Last Updated: 2025-05-16T03:55:51.330Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Advisor software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) Advisor software may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01263.html
CVE ID: CVE-2025-20081 State: PUBLISHED Published: 2025-03-04T03:44:28.501Z Last Updated: 2025-03-04T14:29:00.301Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-416 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md