alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2019-0096 (published 2019-05-17)
Out of bound write vulnerability in subsystem for Intel(R) AMT before versions 11.8.65, 11.11.65, 11.22.65, 12.0.35 may allow an authenticated user to potentially enable escalation of privilege via adjacent network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2019-0097 (published 2019-05-17)
Insufficient input validation vulnerability in subsystem for Intel(R) AMT before version 12.0.35 may allow a privileged user to potentially enable denial of service via network access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2019-0098 (published 2019-05-17)
Logic bug vulnerability in subsystem for Intel(R) CSME before version 12.0.35, Intel(R) TXE before 3.1.65, 4.0.15 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, trusted_execution_engine_firmware
CVE-2019-0099 (published 2019-05-17)
Insufficient access control vulnerability in subsystem in Intel(R) SPS before version SPS_E3_05.00.04.027.0 may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: server_platform_services_firmware
CVE-2019-0101 (published 2019-02-18)
Authentication bypass in the Intel Unite(R) solution versions 3.2 through 3.3 may allow an unauthenticated user to potentially enable escalation of privilege to the Intel Unite(R) Solution administrative portal via network access.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: unite
CVE-2019-0102 (published 2019-02-18)
Insufficient session authentication in web server for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-384
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0103 (published 2019-02-18)
Insufficient file protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0104 (published 2019-02-18)
Insufficient file protection in uninstall routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0105 (published 2019-02-18)
Insufficient file permissions checking in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-863
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0106 (published 2019-02-18)
Insufficient run protection in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0107 (published 2019-02-18)
Insufficient user prompt in install routine for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0108 (published 2019-02-18)
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable disclosure of information via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-732
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0109 (published 2019-02-18)
Improper folder permissions in Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0110 (published 2019-02-18)
Insufficient key management for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0111 (published 2019-02-18)
Improper file permissions for Intel(R) Data Center Manager SDK before version 5.0.2 may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-732
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0112 (published 2019-02-18)
Improper flow control in crypto routines for Intel(R) Data Center Manager SDK before version 5.0.2 may allow a privileged user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: data_center_manager
CVE-2019-0113 (published 2019-05-17)
Insufficient bounds checking in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: graphics_driver
CVE-2019-0114 (published 2019-05-17)
A race condition in Intel(R) Graphics Drivers before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-362
Affected vendors: intel
Affected products: graphics_driver
CVE-2019-0115 (published 2019-05-17)
Insufficient input validation in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: graphics_driver
CVE-2019-0116 (published 2019-05-17)
An out of bound read in KMD module for Intel(R) Graphics Driver before version 10.18.14.5067 (aka 15.36.x.5067) and 10.18.10.5069 (aka 15.33.x.5069) may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-125
Affected vendors: intel
Affected products: graphics_driver
CVE-2019-0117 (published 2019-11-14)
Insufficient access control in protected memory subsystem for Intel(R) SGX for 6th, 7th, 8th, 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5, v6 Families; Intel(R) Xeon(R) E-2100 & E-2200 Processor Families with Intel(R) Processor Graphics may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: core_i5-7200u, core_i5-7200u_firmware, core_i5-7260u, core_i5-7260u_firmware, core_i5-7267u, core_i5-7267u_firmware, core_i5-7287u, core_i5-7287u_firmware, core_i5-7300hq, core_i5-7300hq_firmware, core_i5-7300u, core_i5-7300u_firmware, core_i5-7360u, core_i5-7360u_firmware, core_i5-7400, core_i5-7400_firmware, core_i5-7400t, core_i5-7400t_firmware, core_i5-7440eq, core_i5-7440eq_firmware, core_i5-7440hq, core_i5-7440hq_firmware, core_i5-7442eq, core_i5-7442eq_firmware, core_i5-7500
CVE-2019-0119 (published 2019-05-17)
Buffer overflow vulnerability in system firmware for Intel(R) Xeon(R) Processor D Family, Intel(R) Xeon(R) Scalable Processor, Intel(R) Server Board, Intel(R) Server System and Intel(R) Compute Module may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: hns2400lp, hns2400lp_firmware, hns2600bpb, hns2600bpb24, hns2600bpb24_firmware, hns2600bpb_firmware, hns2600bpblc, hns2600bpblc24, hns2600bpblc24_firmware, hns2600bpblc_firmware, hns2600bpq, hns2600bpq24, hns2600bpq24_firmware, hns2600bpq_firmware, hns2600bps, hns2600bps24, hns2600bps24_firmware, hns2600bps_firmware, hns2600jf, hns2600jf_firmware, hns2600jff, hns2600jff_firmware, hns2600jfq, hns2600jfq_firmware, hns2600kp
CVE-2019-0120 (published 2019-05-17)
Insufficient key protection vulnerability in silicon reference firmware for Intel(R) Pentium(R) Processor J Series, Intel(R) Pentium(R) Processor N Series, Intel(R) Celeron(R) J Series, Intel(R) Celeron(R) N Series, Intel(R) Atom(R) Processor A Series, Intel(R) Atom(R) Processor E3900 Series, Intel(R) Pentium(R) Processor Silver Series may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-522
Affected vendors: intel
Affected products: atom_230, atom_230_firmware, atom_330, atom_330_firmware, atom_x5-e3930, atom_x5-e3930_firmware, atom_x5-e3940, atom_x5-e3940_firmware, atom_x7-e3950, atom_x7-e3950_firmware, celeron_j3060, celeron_j3060_firmware, celeron_j3160, celeron_j3160_firmware, celeron_j3355, celeron_j3355_firmware, celeron_j3455, celeron_j3455_firmware, celeron_j4005, celeron_j4005_firmware, celeron_j4105, celeron_j4105_firmware, celeron_n2830, celeron_n2830_firmware, celeron_n2840
CVE-2019-0121 (published 2019-03-14)
Improper permissions in Intel(R) Matrix Storage Manager 8.9.0.1023 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: intel
Affected products: matrix_storage_manager
CVE-2019-0122 (published 2019-03-14)
Double free in Intel(R) SGX SDK for Linux before version 2.2 and Intel(R) SGX SDK for Windows before version 2.1 may allow an authenticated user to potentially enable information disclosure or denial of service via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-415
Affected vendors: intel, linux, microsoft
Affected products: linux_kernel, software_guard_extensions_sdk, windows
CVE-2019-0123 (published 2019-11-14)
Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting SGX, may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: core_i7-10510u, core_i7-10510u_firmware, core_i7-10510y, core_i7-10510y_firmware, core_i7-10710u, core_i7-10710u_firmware, core_i7-6500u, core_i7-6500u_firmware, core_i7-6560u, core_i7-6560u_firmware, core_i7-6567u, core_i7-6567u_firmware, core_i7-6600u, core_i7-6600u_firmware, core_i7-6650u, core_i7-6650u_firmware, core_i7-6660u, core_i7-6660u_firmware, core_i7-6700, core_i7-6700_firmware, core_i7-6700hq, core_i7-6700hq_firmware, core_i7-6700k, core_i7-6700k_firmware, core_i7-6700t
CVE-2019-0124 (published 2019-11-14)
Insufficient memory protection in Intel(R) 6th Generation Core Processors and greater, supporting TXT, may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: core_i7-10510u, core_i7-10510u_firmware, core_i7-10510y, core_i7-10510y_firmware, core_i7-10710u, core_i7-10710u_firmware, core_i7-6500u, core_i7-6500u_firmware, core_i7-6560u, core_i7-6560u_firmware, core_i7-6567u, core_i7-6567u_firmware, core_i7-6600u, core_i7-6600u_firmware, core_i7-6650u, core_i7-6650u_firmware, core_i7-6660u, core_i7-6660u_firmware, core_i7-6700, core_i7-6700_firmware, core_i7-6700hq, core_i7-6700hq_firmware, core_i7-6700k, core_i7-6700k_firmware, core_i7-6700t
CVE-2019-0126 (published 2019-05-17)
Insufficient access control in silicon reference firmware for Intel(R) Xeon(R) Scalable Processor, Intel(R) Xeon(R) Processor D Family may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: xeon_bronze_processors, xeon_bronze_processors_firmware, xeon_d-1513n, xeon_d-1513n_firmware, xeon_d-1518, xeon_d-1518_firmware, xeon_d-1520, xeon_d-1520_firmware, xeon_d-1521, xeon_d-1521_firmware, xeon_d-1523n, xeon_d-1523n_firmware, xeon_d-1527, xeon_d-1527_firmware, xeon_d-1528, xeon_d-1528_firmware, xeon_d-1529, xeon_d-1529_firmware, xeon_d-1531, xeon_d-1531_firmware, xeon_d-1533n, xeon_d-1533n_firmware, xeon_d-1537, xeon_d-1537_firmware, xeon_d-1539
CVE-2019-0127 (published 2019-02-18)
Logic error in the installer for Intel(R) OpenVINO(TM) 2018 R3 and before for Linux may allow a privileged user to potentially enable information disclosure via local access.
Severity: LOW (CVSS 3.0 vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel, linux
Affected products: linux_kernel, openvino
CVE-2019-0128 (published 2019-06-13)
Improper permissions in the installer for Intel(R) Chipset Device Software (INF Update Utility) before version 10.1.1.45 may allow an authenticated user to escalate privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: intel
Affected products: chipset_device_software
CVE-2019-0129 (published 2019-03-14)
Improper permissions for Intel(R) USB 3.0 Creator Utility all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: intel
Affected products: usb_3.0_creator_utility
CVE-2019-0130 (published 2019-06-13)
Reflected XSS in web interface for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an unauthenticated user to potentially enable denial of service via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H)
Weakness: CWE-79
Affected vendors: intel, lenovo
Affected products: rapid_storage_technology_enterprise, thinkstation_p520, thinkstation_p520_firmware, thinkstation_p520c, thinkstation_p520c_firmware, thinkstation_p720, thinkstation_p720_firmware, thinkstation_p920, thinkstation_p920_firmware
CVE-2019-0131 (published 2019-12-18)
Insufficient input validation in subsystem in Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable denial of service or information disclosure via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2019-0132 (published 2019-05-17)
Data Corruption in Intel Unite(R) Client before version 3.3.176.13 may allow an unauthenticated user to potentially cause a denial of service via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: intel
Affected products: unite
CVE-2019-0134 (published 2019-12-16)
Improper permissions in the Intel(R) Dynamic Platform and Thermal Framework v8.3.10208.5643 and before may allow an authenticated user to potentially execute code at an elevated level of privilege.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-276
Affected vendors: intel
Affected products: dynamic_platform_and_thermal_framework
CVE-2019-0135 (published 2019-03-14)
Improper permissions in the installer for Intel(R) Accelerated Storage Manager in Intel(R) RSTe before version 5.5.0.2015 may allow an authenticated user to potentially enable escalation of privilege via local access. L-SA-00206
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: intel, lenovo
Affected products: rapid_storage_technology_enterprise, thinkstation_p520, thinkstation_p520_firmware, thinkstation_p520c, thinkstation_p520c_firmware, thinkstation_p720, thinkstation_p720_firmware, thinkstation_p920, thinkstation_p920_firmware
CVE-2019-0136 (published 2019-06-13)
Insufficient access control in the Intel(R) PROSet/Wireless WiFi Software driver before version 21.10 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H)
Affected vendors: google, intel, linux, microsoft
Affected products: chrome_os, linux_kernel, proset\/wireless_wifi, windows_10, windows_7, windows_8.1
CVE-2019-0138 (published 2019-05-17)
Improper directory permissions in Intel(R) ACU Wizard version 12.0.0.129 and earlier may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: acu_wizard
CVE-2019-0139 (published 2019-11-14)
Insufficient access control in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow a privileged user to potentially enable an escalation of privilege, denial of service, or information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0140 (published 2019-11-14)
Buffer overflow in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an unauthenticated user to potentially enable an escalation of privilege via an adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0142 (published 2019-11-14)
Insufficient access control in ilp60x64.sys driver for Intel(R) Ethernet 700 Series Controllers before version 1.33.0.0 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0143 (published 2019-11-14)
Unhandled exception in Kernel-mode drivers for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0144 (published 2019-11-14)
Unhandled exception in firmware for Intel(R) Ethernet 700 Series Controllers before version 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Weakness: CWE-755
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0145 (published 2019-11-14)
Buffer overflow in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable an escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: intel, linux
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware, linux_kernel
CVE-2019-0146 (published 2019-11-14)
Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-772
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0147 (published 2019-11-14)
Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0148 (published 2019-11-14)
Resource leak in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-772
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0149 (published 2019-11-14)
Insufficient input validation in i40e driver for Intel(R) Ethernet 700 Series Controllers versions before 2.8.43 may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0150 (published 2019-11-14)
Insufficient access control in firmware Intel(R) Ethernet 700 Series Controllers versions before 7.0 may allow a privileged user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)
Affected vendors: intel
Affected products: ethernet_700_series_software, ethernet_controller_710-bm1, ethernet_controller_710-bm1_firmware, ethernet_controller_x710-at2, ethernet_controller_x710-at2_firmware, ethernet_controller_x710-bm2, ethernet_controller_x710-bm2_firmware, ethernet_controller_x710-tm4, ethernet_controller_x710-tm4_firmware, ethernet_controller_xxv710-am1, ethernet_controller_xxv710-am1_firmware, ethernet_controller_xxv710-am2, ethernet_controller_xxv710-am2_firmware
CVE-2019-0151 (published 2019-11-14)
Insufficient memory protection in Intel(R) TXT for certain Intel(R) Core Processors and Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: core_i5-5300u, core_i5-5300u_firmware, core_i5-5350u, core_i5-5350u_firmware, core_i5-6300u, core_i5-6300u_firmware, core_i5-6360u, core_i5-6360u_firmware, core_i5-6440hq, core_i5-6440hq_firmware, core_i5-6500, core_i5-6500_firmware, core_i5-7300u, core_i5-7300u_firmware, core_i5-7y57, core_i5-7y57_firmware, core_i5-8350u, core_i5-8350u_firmware, core_i5-8365u, core_i5-8365u_firmware, core_i5-8400h, core_i5-8400h_firmware, core_i5-8500, core_i5-8500_firmware, core_i5-8500t
CVE-2019-0152 (published 2019-11-14)
Insufficient memory protection in System Management Mode (SMM) and Intel(R) TXT for certain Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: xeon_bronze_3104, xeon_bronze_3104_firmware, xeon_bronze_3106, xeon_bronze_3106_firmware, xeon_bronze_3204, xeon_bronze_3204_firmware, xeon_d-2123it, xeon_d-2123it_firmware, xeon_d-2141i, xeon_d-2141i_firmware, xeon_d-2142it, xeon_d-2142it_firmware, xeon_d-2143it, xeon_d-2143it_firmware, xeon_d-2145nt, xeon_d-2145nt_firmware, xeon_d-2146nt, xeon_d-2146nt_firmware, xeon_d-2161i, xeon_d-2161i_firmware, xeon_d-2163it, xeon_d-2163it_firmware, xeon_d-2166nt, xeon_d-2166nt_firmware, xeon_d-2173it
CVE-2019-0153 (published 2019-05-17)
Buffer overflow in subsystem in Intel(R) CSME 12.0.0 through 12.0.34 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: converged_security_management_engine_firmware
CVE-2019-0154 (published 2019-11-14)
Insufficient access control in subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 and E-2100 Processor Families may allow an authenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: canonical, intel
Affected products: atom_x5-a3930, atom_x5-a3930_firmware, atom_x5-a3940, atom_x5-a3940_firmware, atom_x7-a3950, atom_x7-a3950_firmware, celeron_j3355, celeron_j3355_firmware, celeron_j3455, celeron_j3455_firmware, celeron_j4005, celeron_j4005_firmware, celeron_j4105, celeron_j4105_firmware, celeron_n3350, celeron_n3350_firmware, celeron_n3450, celeron_n3450_firmware, celeron_n4000, celeron_n4000_firmware, celeron_n4100, celeron_n4100_firmware, core_i7-6500u, core_i7-6500u_firmware, core_i7-6560u
CVE-2019-0155 (published 2019-11-14)
Insufficient access control in a subsystem for Intel (R) processor graphics in 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Pentium(R) Processor J, N, Silver and Gold Series; Intel(R) Celeron(R) Processor J, N, G3900 and G4900 Series; Intel(R) Atom(R) Processor A and E3900 Series; Intel(R) Xeon(R) Processor E3-1500 v5 and v6, E-2100 and E-2200 Processor Families; Intel(R) Graphics Driver for Windows before 26.20.100.6813 (DCH) or 26.20.100.6812 and before 21.20.x.5077 (aka15.45.5077), i915 Linux Driver for Intel(R) Processor Graphics before versions 5.4-rc7, 5.3.11, 4.19.84, 4.14.154, 4.9.201, 4.4.201 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: canonical, intel, redhat
Affected products: atom_x5-e3930, atom_x5-e3930_firmware, atom_x5-e3940, atom_x5-e3940_firmware, atom_x7-e3950, atom_x7-e3950_firmware, celeron_g3900, celeron_g3900_firmware, celeron_g3900e, celeron_g3900e_firmware, celeron_g3900t, celeron_g3900t_firmware, celeron_g3900te, celeron_g3900te_firmware, celeron_g3902e, celeron_g3902e_firmware, celeron_g3920, celeron_g3920_firmware, celeron_g3930, celeron_g3930_firmware, celeron_g3930e, celeron_g3930e_firmware, celeron_g3930t, celeron_g3930t_firmware, celeron_g3930te
CVE-2019-0157 (published 2019-06-13)
Insufficient input validation in the Intel(R) SGX driver for Linux may allow an authenticated user to potentially enable a denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel, linux
Affected products: linux_kernel, software_guard_extensions, software_guard_extensions_data_center_attestation_primitives
CVE-2019-0158 (published 2019-04-17)
Insufficient path checking in the installation package for Intel(R) Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: graphics_performance_analyzer
CVE-2019-0159 (published 2019-12-16)
Insufficient memory protection in the Linux Administrative Tools for Intel(R) Network Adapters before version 24.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: administrative_tools_for_intel_network_adapters
CVE-2019-0160 (published 2019-03-27)
Buffer overflow in system firmware for EDK II may allow unauthenticated user to potentially enable escalation of privilege and/or denial of service via network access.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-120
Affected vendors: fedoraproject, opensuse, redhat, tianocore
Affected products: edk_ii, enterprise_linux, enterprise_linux_eus, enterprise_linux_server, enterprise_linux_server_aus, enterprise_linux_server_tus, fedora, leap
CVE-2019-0161 (published 2019-03-27)
Stack overflow in XHCI for EDK II may allow an unauthenticated user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-787
Affected vendors: tianocore
Affected products: edk_ii
CVE-2019-0162 (published 2019-04-17)
Memory access in virtual memory mapping for some microprocessors may allow an authenticated user to potentially enable information disclosure via local access.
Severity: LOW (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)
Affected vendors: intel
Affected products: -
CVE-2019-0163 (published 2019-04-17)
Insufficient input validation in system firmware for Intel(R) Broadwell U i5 vPro before version MYBDWi5v.86A may allow an authenticated user to potentially enable escalation of privilege, denial of service, and/or information disclosure via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: i5-5350u, i5-5350u_firmware
CVE-2019-0164 (published 2019-06-13)
Improper permissions in the installer for Intel(R) Turbo Boost Max Technology 3.0 driver version 1.0.0.1035 and before may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)
Weakness: CWE-264
Affected vendors: intel, lenovo
Affected products: thinkstation_p410, thinkstation_p410_firmware, thinkstation_p510, thinkstation_p510_firmware, thinkstation_p710, thinkstation_p710_firmware, thinkstation_p910, thinkstation_p910_firmware, turbo_boost_max_technology_3.0
CVE-2019-0165 (published 2019-12-18)
Insufficient Input validation in the subsystem for Intel(R) CSME before versions 12.0.45,13.0.10 and 14.0.10 may allow a privileged user to potentially enable denial of service via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: intel
Affected products: converged_security_management_engine_firmware
CVE-2019-0166 (published 2019-12-18)
Insufficient input validation in the subsystem for Intel(R) AMT before versions 11.8.70, 11.11.70, 11.22.70 and 12.0.45 may allow an unauthenticated user to potentially enable information disclosure via network access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel
Affected products: active_management_technology_firmware
CVE-2019-0168 (published 2019-12-18)
Insufficient input validation in the subsystem for Intel(R) CSME before versions 11.8.70, 12.0.45 and 13.0.10; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-20
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, trusted_execution_engine_firmware
CVE-2019-0169 (published 2019-12-18)
Heap overflow in subsystem in Intel(R) CSME before versions 11.8.70, 11.11.70, 11.22.70, 12.0.45; Intel(R) TXE before versions 3.1.70 and 4.0.20 may allow an unauthenticated user to potentially enable escalation of privileges, information disclosure or denial of service via adjacent access.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: intel
Affected products: converged_security_management_engine_firmware, trusted_execution_engine_firmware
CVE-2019-0170 (published 2019-05-17)
Buffer overflow in subsystem in Intel(R) DAL before version 12.0.35 may allow a privileged user to potentially enable escalation of privilege via local access.
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-119
Affected vendors: intel
Affected products: converged_security_management_engine_firmware
CVE-2019-0171 (published 2019-05-17)
Improper directory permissions in the installer for Intel(R) Quartus(R) software may allow an authenticated user to potentially enable escalation of privilege via local access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-732
Affected vendors: intel
Affected products: quartus_ii, quartus_prime
CVE-2019-0172 (published 2019-05-17)
A logic issue in Intel Unite(R) Client for Android prior to version 4.0 may allow a remote attacker to potentially enable escalation of privilege via network access.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: unite
CVE-2019-0173 (published 2019-08-19)
Authentication bypass in the web console for Intel(R) Raid Web Console 2 all versions may allow an unauthenticated attacker to potentially enable disclosure of information via network access.
Severity: HIGH (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H)
Affected vendors: intel
Affected products: raid_web_console_2
CVE-2019-0174 (published 2019-06-13)
Logic condition in specific microprocessors may allow an authenticated user to potentially enable partial physical address information disclosure via local access.
Severity: LOW (CVSS 3.0 vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Affected vendors: intel
Affected products: 2000e, 2000e_firmware, 2002e, 2002e_firmware, 2950m, 2950m_firmware, 2955u, 2955u_firmware, 2957u, 2957u_firmware, 2961y, 2961y_firmware, 2970m, 2970m_firmware, 2980u, 2980u_firmware, 2981u, 2981u_firmware, 3550m, 3550m_firmware, 3556u, 3556u_firmware, 3558u, 3558u_firmware, 3560m
CVE-2019-0175 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-522
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0177 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0178 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-522
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0179 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-522
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0180 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)
Weakness: CWE-522
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0181 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0182 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-522
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0183 (published 2019-06-13)
Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-522
Affected vendors: intel
Affected products: open_cloud_integrity_tehnology, openattestation
CVE-2019-0184 (published 2019-11-14)
Insufficient access control in protected memory subsystem for Intel(R) TXT for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor Families; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 Families; Intel(R) Xeon(R) E-2100 and E-2200 Processor Families with Intel(R) Processor Graphics and Intel(R) TXT may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: core_i5-6360u, core_i5-6360u_firmware, core_i5-6440eq, core_i5-6440eq_firmware, core_i5-6440hq, core_i5-6440hq_firmware, core_i5-6442eq, core_i5-6442eq_firmware, core_i5-6500, core_i5-6500_firmware, core_i5-6500t, core_i5-6500t_firmware, core_i5-6500te, core_i5-6500te_firmware, core_i5-6585r, core_i5-6585r_firmware, core_i5-6600, core_i5-6600_firmware, core_i5-6600t, core_i5-6600t_firmware, core_i5-6685r, core_i5-6685r_firmware, core_i5-7300u, core_i5-7300u_firmware, core_i5-7360u
CVE-2019-0185 (published 2019-11-14)
Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families; Intel(R) Xeon(R) Processor E3-1500 v5 and v6 families; Intel(R) Xeon(R) E-2100 and E-2200 Processor families with Intel(R) Processor Graphics may allow a privileged user to potentially enable information disclosure via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: intel
Affected products: core_i5-7200u, core_i5-7200u_firmware, core_i5-7260u, core_i5-7260u_firmware, core_i5-7267u, core_i5-7267u_firmware, core_i5-7287u, core_i5-7287u_firmware, core_i5-7300hq, core_i5-7300hq_firmware, core_i5-7300u, core_i5-7300u_firmware, core_i5-7360u, core_i5-7360u_firmware, core_i5-7400, core_i5-7400_firmware, core_i5-7400t, core_i5-7400t_firmware, core_i5-7440eq, core_i5-7440eq_firmware, core_i5-7440hq, core_i5-7440hq_firmware, core_i5-7442eq, core_i5-7442eq_firmware, core_i5-7500
CVE-2019-0186 (published 2019-04-26)
The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigation: * Uninstall the ChatRoomDemo war file - or - * migrate to version 3.1.0 of the chat-room-demo war file
Severity: MEDIUM (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: apache
Affected products: pluto
CVE-2019-0187 (published 2019-03-06)
Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connection to a jmeter-server using RemoteJMeterEngine and proceed with an attack using untrusted data deserialization. This only affect tests running in Distributed mode. Note that versions before 4.0 are not able to encrypt traffic between the nodes, nor authenticate the participating nodes so upgrade to JMeter 5.1 is also advised.
Severity: CRITICAL (CVSS 3.0 vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-327
Affected vendors: apache
Affected products: jmeter
CVE-2019-0188 (published 2019-05-28)
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-611
Affected vendors: apache, oracle
Affected products: camel, enterprise_data_quality, enterprise_manager_base_platform, enterprise_repository, flexcube_private_banking
CVE-2019-0189 (published 2019-09-11)
The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" URL, and uses Java deserialization to perform code execution. In the HttpEngine, the value of the request parameter "serviceContext" is passed to the "deserialize" method of "XmlSerializer". Apache Ofbiz is affected via two different dependencies: "commons-beanutils" and an out-dated version of "commons-fileupload" Mitigation: Upgrade to 16.11.06 or manually apply the commits from OFBIZ-10770 and OFBIZ-10837 on branch 16
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: apache
Affected products: ofbiz
CVE-2019-0190 (published 2019-01-30)
A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bug can be only triggered with Apache HTTP Server version 2.4.37 when using OpenSSL version 1.1.1 or later, due to an interaction in changes to handling of renegotiation attempts.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: apache, openssl, oracle
Affected products: enterprise_manager_ops_center, hospitality_guest_access, http_server, instantis_enterprisetrack, openssl, retail_xstore_point_of_service