Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1992 State: PUBLISHED Published: 2025-05-05T16:54:11.569Z Last Updated: 2025-11-03T19:35:18.347Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: IBM Products: Db2 for Linux, UNIX and Windows Problem Types: CWE-401 Description: IBM Db2 for Linux, UNIX and Windows (includes DB2 Connect Server) 11.5.0 through 11.5.9 and 12.1.0 through 12.1.1 could allow an authenticated user in federation environment, to cause a denial of service due to insufficient release of allocated memory after usage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.ibm.com/support/pages/node/7232515
CVE ID: CVE-2025-1993 State: PUBLISHED Published: 2025-05-09T17:12:10.041Z Last Updated: 2025-08-31T01:27:51.511Z Severity: MEDIUM (CVSS 5.1 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: App Connect Enterprise Certified Container Problem Types: CWE-521 Description: IBM App Connect Enterprise Certified Container 8.1, 8.2, 9.0, 9.1, 9.2, 10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 11.4, 11.5, 11.6, 12.0, 12.1, 12.2, 12.3, 12.4, 12.5, 12.6, 12.7, 12.8, 12.9, and 12.10 DesignerAuthoring instances store their flows in a database that is protected by weaker than expected cryptographic algorithms that could be decrypted by a local user. Additional Analyst Notes: - CISA ADP Vulnrichme
pected cryptographic algorithms that could be decrypted by a local user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7233054
CVE ID: CVE-2025-1994 State: PUBLISHED Published: 2025-08-26T16:49:03.832Z Last Updated: 2025-08-26T17:35:50.942Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: IBM Products: Cognos Command Center Problem Types: CWE-242 Description: IBM Cognos Command Center 10.2.4.1 and 10.2.5 could allow a local user to execute arbitrary code on the system due to the use of unsafe use of the BinaryFormatter function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7242159
CVE ID: CVE-2025-1997 State: PUBLISHED Published: 2025-03-27T14:39:48.719Z Last Updated: 2025-09-29T18:09:14.462Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: IBM Products: UrbanCode Deploy, DevOps Deploy Problem Types: CWE-80 Description: IBM UrbanCode Deploy (UCD) 7.0 through 7.0.5.25, 7.1 through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 is vulnerable to HTML injection. This vulnerability may allow a user to embed arbitrary HTML tags in the Web UI potentially leading to sensitive information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.
ading to sensitive information disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229035
CVE ID: CVE-2025-1998 State: PUBLISHED Published: 2025-03-27T14:41:56.148Z Last Updated: 2025-09-01T01:01:35.057Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: IBM Products: UrbanCode Deploy, DevOps Deploy Problem Types: CWE-532 Description: IBM UrbanCode Deploy (UCD) through 7.1.2.21, 7.2 through 7.2.3.14, and 7.3 through 7.3.2.0 / IBM DevOps Deploy 8.0 through 8.0.1.4 and 8.1 through 8.1 stores potentially sensitive authentication token information in log files that could be read by a local user. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ibm.com/support/pages/node/7229034
CVE ID: CVE-2025-20001 State: PUBLISHED Published: 2025-06-02T14:54:11.514Z Last Updated: 2025-06-02T17:03:57.718Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: High-Logic Products: FontCreator Problem Types: CWE-125 Description: An out-of-bounds read vulnerability exists in High-Logic FontCreator 15.0.0.3015. A specially crafted font file can trigger this vulnerability which can lead to disclosure of sensitive information. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_rep
t Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://talosintelligence.com/vulnerability_reports/TALOS-2025-2157
CVE ID: CVE-2025-20002 State: PUBLISHED Published: 2025-03-05T00:08:13.877Z Last Updated: 2025-03-05T15:06:21.477Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: GMOD Products: Apollo Problem Types: CWE-209 Description: After attempting to upload a file that does not meet prerequisites, GMOD Apollo will respond with local path information disclosure Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-063-07 - https://github.com/GMOD/Apollo
CVE ID: CVE-2025-20003 State: PUBLISHED Published: 2025-05-13T21:01:26.302Z Last Updated: 2025-05-15T04:02:12.301Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics Driver software installers Problem Types: Escalation of Privilege, CWE-59 Description: Improper link resolution before file access ('Link Following') for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE ID: CVE-2025-20004 State: PUBLISHED Published: 2025-05-13T21:01:27.754Z Last Updated: 2025-05-15T03:59:12.787Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N) Vendors: n/a Products: Intel(R) Xeon(R) 6 processor E-Cores firmware Problem Types: Escalation of Privilege, CWE-691 Description: Insufficient control flow management in the Alias Checking Trusted Module for some Intel(R) Xeon(R) 6 processor E-Cores firmware may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01273.html
CVE ID: CVE-2025-20006 State: PUBLISHED Published: 2025-05-13T21:01:29.171Z Last Updated: 2025-05-14T14:09:05.552Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software for Windows Problem Types: Denial of Service, CWE-416 Description: Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE ID: CVE-2025-20008 State: PUBLISHED Published: 2025-05-13T21:01:30.603Z Last Updated: 2025-05-14T18:09:30.053Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Simics(R) Package Manager software Problem Types: Escalation of Privilege, CWE-277 Description: Insecure inherited permissions for some Intel(R) Simics(R) Package Manager software before version 1.12.0 may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01297.html
CVE ID: CVE-2025-20009 State: PUBLISHED Published: 2025-05-13T21:01:32.069Z Last Updated: 2025-05-14T17:30:56.507Z Severity: MEDIUM (CVSS 4.1 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Server D50DNP and M50FCP boards Problem Types: Information Disclosure, CWE-20 Description: Improper input validation in the UEFI firmware GenerationSetup module for the Intel(R) Server D50DNP and M50FCP boards may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE ID: CVE-2025-20010 State: PUBLISHED Published: 2025-11-11T16:49:22.946Z Last Updated: 2025-11-13T04:55:13.015Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Processor Identification Utility Problem Types: Escalation of Privilege, CWE-1104 Description: Use of unmaintained third party components for some Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requiremen
ity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are not present without special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (high), integrity (high) and availability (high) of the vulnerable system, resulting in subsequent system confidentiality (none), integrity (none) and availability (none) impacts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01334.html
CVE ID: CVE-2025-20011 State: PUBLISHED Published: 2025-03-04T03:44:23.499Z Last Updated: 2025-03-04T14:32:56.195Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-401 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker case DOS through missing release of memory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-20012 State: PUBLISHED Published: 2025-05-13T21:01:33.504Z Last Updated: 2025-11-03T19:35:20.207Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Core™ Ultra Processors Problem Types: Information Disclosure, CWE-696 Description: Incorrect behavior order for some Intel(R) Core™ Ultra Processors may allow an unauthenticated user to potentially enable information disclosure via physical access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01322.html
CVE ID: CVE-2025-20013 State: PUBLISHED Published: 2025-05-13T21:01:34.902Z Last Updated: 2025-05-14T16:05:01.610Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: n/a Products: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform Problem Types: Information Disclosure, CWE-200 Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.htm
: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE ID: CVE-2025-20014 State: PUBLISHED Published: 2025-01-29T19:46:58.215Z Last Updated: 2025-01-29T19:57:36.743Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: mySCADA Products: myPRO Manager, myPRO Runtime Problem Types: CWE-78 Description: mySCADA myPRO does not properly neutralize POST requests sent to a specific port with version information. This vulnerability could be exploited by an attacker to execute arbitrary commands on the affected system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-25-023-01
CVE ID: CVE-2025-20015 State: PUBLISHED Published: 2025-05-13T21:01:36.385Z Last Updated: 2025-05-16T03:55:47.256Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Ethernet Connection software Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path element for some Intel(R) Ethernet Connection software before version 29.4 may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01294.html
CVE ID: CVE-2025-20016 State: PUBLISHED Published: 2025-01-14T09:32:33.704Z Last Updated: 2025-01-14T15:48:58.147Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Y'S corporation Products: STEALTHONE D220, STEALTHONE D340, STEALTHONE D440 Problem Types: CWE-78 Description: OS command injection vulnerability exists in network storage servers STEALTHONE D220/D340/D440 provided by Y'S corporation. A user with an administrative privilege who logged in to the web management page of the affected product may execute an arbitrary OS command. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://stealthone.net/product_info/d220-d340%e3%80%8cv6-03-03%e3%80%8d%e5%8f%8a%e3%81%b3d440%e3%80%8cv7-00-11%e3%80%8d%e3%83%95%e3%82%a1%e3%83%bc%e3%83%a0%e3%82%a6%e3%82%a7%e3%82%a2%e3%82%92%e3%83%aa%e3%83%aa%e3%83%bc%e3%82%b9%e8%87%b4/ - https://jvn.jp/en/vu/JVNVU99653331/
CVE ID: CVE-2025-20017 State: PUBLISHED Published: 2025-08-12T16:57:51.242Z Last Updated: 2025-08-13T15:04:15.323Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) oneAPI Toolkit and component software installers Problem Types: Escalation of Privilege, CWE-427 Description: Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01285.html
CVE ID: CVE-2025-20018 State: PUBLISHED Published: 2025-05-13T21:01:38.075Z Last Updated: 2025-05-15T19:35:37.034Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics Drivers Problem Types: Escalation of Privilege, CWE-822 Description: Untrusted pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE ID: CVE-2025-20021 State: PUBLISHED Published: 2025-03-04T03:44:24.626Z Last Updated: 2025-03-04T14:32:07.081Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-125 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-20022 State: PUBLISHED Published: 2025-05-13T21:01:39.398Z Last Updated: 2025-05-15T19:35:22.847Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H) Vendors: n/a Products: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform Problem Types: Information Disclosure, CWE-691 Description: Insufficient control flow management for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow a privileged user to potentially enable information disclosure via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.html
CVE ID: CVE-2025-20023 State: PUBLISHED Published: 2025-08-12T16:57:55.361Z Last Updated: 2025-08-13T15:04:17.822Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: n/a Products: Intel(R) Graphics Driver software installers Problem Types: Escalation of Privilege, CWE-276 Description: Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01299.html
CVE ID: CVE-2025-20024 State: PUBLISHED Published: 2025-03-04T03:44:26.109Z Last Updated: 2025-03-04T14:31:01.836Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: OpenHarmony Products: OpenHarmony Problem Types: CWE-190 Description: in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through integer overflow. This vulnerability can be exploited only in restricted scenarios. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2025/2025-03.md
CVE ID: CVE-2025-20025 State: PUBLISHED Published: 2025-08-12T16:57:57.172Z Last Updated: 2025-08-12T18:22:21.505Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:N/A:H) Vendors: n/a Products: TinyCBOR libraries maintained by Intel(R) Problem Types: Denial of Service, CWE-674 Description: Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01326.html
CVE ID: CVE-2025-20026 State: PUBLISHED Published: 2025-05-13T21:01:40.723Z Last Updated: 2025-05-14T14:08:45.811Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software for Windows Problem Types: Denial of Service, CWE-125 Description: Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE ID: CVE-2025-20029 State: PUBLISHED Published: 2025-02-05T17:31:06.455Z Last Updated: 2025-02-26T04:55:26.913Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Problem Types: CWE-78 Description: Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000148587
CVE ID: CVE-2025-20030 State: PUBLISHED Published: 2025-05-13T21:01:42.320Z Last Updated: 2025-05-14T14:07:35.461Z Severity: LOW (CVSS 2.6 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: n/a Products: Edge Orchestrator software for Intel(R) Tiber™ Edge Platform Problem Types: Information Disclosure, CWE-200 Description: Exposure of sensitive information to an unauthorized actor for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable information disclosure via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01239.htm
CVE ID: CVE-2025-20031 State: PUBLISHED Published: 2025-05-13T21:01:43.806Z Last Updated: 2025-05-14T14:07:08.158Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: n/a Products: Intel(R) Graphics Drivers Problem Types: Denial of Service, CWE-20 Description: Improper input validation for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01259.html
CVE ID: CVE-2025-20032 State: PUBLISHED Published: 2025-05-13T21:01:45.216Z Last Updated: 2025-05-14T14:06:48.901Z Severity: HIGH (CVSS 7.9 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi Software for Windows Problem Types: Denial of Service, CWE-20 Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.100 may allow a privileged user to potentially enable denial of service via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01270.html
CVE ID: CVE-2025-20033 State: PUBLISHED Published: 2025-01-09T06:55:02.063Z Last Updated: 2025-01-09T15:05:20.599Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Mattermost Products: Mattermost Problem Types: CWE-1287 Description: Mattermost versions 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post types, which allows attackers to deny service to users with the sysconsole_read_plugins permission via creating a post with the custom_pl_notification type and specific props. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-20034 State: PUBLISHED Published: 2025-05-13T21:01:46.644Z Last Updated: 2025-05-14T14:03:51.557Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: n/a Products: Intel(R) Server D50DNP and M50FCP boards Problem Types: Information Disclosure, CWE-20 Description: Improper input validation in the BackupBiosUpdate UEFI firmware SmiVariable driver for the Intel(R) Server D50DNP and M50FCP boards before version R01.02.0003 may allow a privileged user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-0126
Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01269.html
CVE ID: CVE-2025-20036 State: PUBLISHED Published: 2025-01-15T16:10:47.847Z Last Updated: 2025-01-15T16:49:13.457Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Mattermost Products: Mattermost Problem Types: CWE-1287 Description: Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://mattermost.com/security-updates
CVE ID: CVE-2025-20037 State: PUBLISHED Published: 2025-08-12T16:57:58.729Z Last Updated: 2025-08-13T15:04:19.326Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H) Vendors: n/a Products: Intel(R) Converged Security and Management Engine Problem Types: Escalation of Privilege, CWE-367 Description: Time-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01280.html