deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-8452
Published: 2025-08-12
Description: By using the "uscan" protocol provided by the eSCL specification, an attacker can discover the serial number of multi-function printers that implement the Brother-provided firmware. This serial number can, in turn, can be leveraged by the flaw described by CVE-2024-51978 to calculate the default administrator password. This flaw is similar to CVE-2024-51977, with the only difference being the protocol by which an attacker can use to learn the remote device's serial number. The eSCL/uscan vector is typically only exposed on the local network. Any discovery service that implements the eSCL specification can be used to exploit this vulnerability, and one such implementation is the runZero Explorer. Changing the default administrator password will render this vulnerability virtually worthless, since the calculated default administrator password would no longer be the correct password.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-538
References: https://help.runzero.com/docs/installing-an-explorer/; https://support.brother.com/g/b/faqend.aspx?c=us&lang=en&prod=group2&faqid=faq00100851_000; https://takeonme.org/gcves/GCVE-1337-2[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]01
CVE: CVE-2024-33607
Published: 2025-08-12
Description: Out-of-bounds read in some Intel(R) TDX module software before version TDX_1.5.07.00.774 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-125
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01192.html
CVE: CVE-2025-20017
Published: 2025-08-12
Description: Uncontrolled search path for some Intel(R) oneAPI Toolkit and component software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01285.html
CVE: CVE-2025-20023
Published: 2025-08-12
Description: Incorrect default permissions for some Intel(R) Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01299.html
CVE: CVE-2025-20025
Published: 2025-08-12
Description: Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-674
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01326.html
CVE: CVE-2025-20037
Published: 2025-08-12
Description: Time-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-367
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01280.html
CVE: CVE-2025-20048
Published: 2025-08-12
Description: Uncontrolled search path for the Intel(R) Trace Analyzer and Collector software all verions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01266.html
CVE: CVE-2025-20053
Published: 2025-08-12
Description: Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-20067
Published: 2025-08-12
Description: Observable timing discrepancy in firmware for some Intel(R) CSME and Intel(R) SPS may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-208
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01280.html
CVE: CVE-2025-20074
Published: 2025-08-12
Description: Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before version 40.24.11210 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-367
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01286.html
CVE: CVE-2025-20077
Published: 2025-08-12
Description: Missing release of memory after effective lifetime in the UEFI OobRasMmbiHandlerDriver module for some Intel(R) reference server platforms may allow a privileged user to enable denial of service via local access.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-401
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01300.html
CVE: CVE-2025-20087
Published: 2025-08-12
Description: Incorrect default permissions for some Intel(R) oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01285.html
CVE: CVE-2025-20090
Published: 2025-08-12
Description: Untrusted Pointer Dereference for some Intel(R) QuickAssist Technology software before version 2.5.0 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-822
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01301.html
CVE: CVE-2025-20092
Published: 2025-08-12
Description: Uncontrolled search path for some Clock Jitter Tool software before version 6.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01316.html
CVE: CVE-2025-20093
Published: 2025-08-12
Description: Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-754
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-20099
Published: 2025-08-12
Description: Improper access control for some Intel(R) Rapid Storage Technology installation software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01298.html
CVE: CVE-2025-20109
Published: 2025-08-12
Description: Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-653
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01249.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-20613
Published: 2025-08-12
Description: Predictable Seed in Pseudo-Random Number Generator (PRNG) in the firmware for some Intel(R) TDX may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-337
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01312.html
CVE: CVE-2025-20625
Published: 2025-08-12
Description: Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.110.0.5 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 7.4 (HIGH)
CWE: CWE-754
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01292.html
CVE: CVE-2025-20627
Published: 2025-08-12
Description: Uncontrolled search path for some Intel(R) oneAPI DPC++/C++ Compiler software before version 2025.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01285.html
CVE: CVE-2025-21086
Published: 2025-08-12
Description: Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable escalation of privilege.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE: CVE-2025-21090
Published: 2025-08-12
Description: Missing reference to active allocated resource for some Intel(R) Xeon(R) processors may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-771
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-21093
Published: 2025-08-12
Description: Uncontrolled search path element for some Intel(R) Driver &amp; Support Assistant Tool software before version 24.6.49.8 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01321.html
CVE: CVE-2025-21096
Published: 2025-08-12
Description: Improper buffer restrictions in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 1.9 (LOW)
CWE: CWE-119
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01312.html
CVE: CVE-2025-22392
Published: 2025-08-12
Description: Out-of-bounds read in firmware for some Intel(R) AMT and Intel(R) Standard Manageability may allow a privileged user to potentially enable information disclosure via network access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-125
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01280.html
CVE: CVE-2025-22836
Published: 2025-08-12
Description: Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-22838
Published: 2025-08-12
Description: Uncontrolled search path for some Intel(R) RealSense(TM) Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01318.html
CVE: CVE-2025-22839
Published: 2025-08-12
Description: Insufficient granularity of access control in the OOB-MSM for some Intel(R) Xeon(R) 6 Scalable processors may allow a privileged user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1220
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01310.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-22840
Published: 2025-08-12
Description: Sequence of processor instructions leads to unexpected behavior for some Intel(R) Xeon(R) 6 Scalable processors may allow an authenticated user to potentially enable escalation of privilege via local access
CVSS Score: 7.4 (HIGH)
CWE: CWE-1281
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01308.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-22853
Published: 2025-08-12
Description: Improper synchronization in the firmware for some Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 2.3 (LOW)
CWE: CWE-662
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01312.html
CVE: CVE-2025-22889
Published: 2025-08-12
Description: Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processor with Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-1260
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01311.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-22893
Published: 2025-08-12
Description: Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-691
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-23241
Published: 2025-08-12
Description: Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-190
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-24296
Published: 2025-08-12
Description: Improper input validation in some firmware for the Intel(R) E810 Ethernet before version 4.6 may allow a privileged user to enable denial of service via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01257.html
CVE: CVE-2025-24302
Published: 2025-08-12
Description: Uncontrolled recursion for some TinyCBOR libraries maintained by Intel(R) before version 0.6.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-674
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01326.html
CVE: CVE-2025-24303
Published: 2025-08-12
Description: Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-754
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-24305
Published: 2025-08-12
Description: Insufficient control flow management in the Alias Checking Trusted Module (ACTM) firmware for some Intel(R) Xeon(R) processors may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-691
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01313.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-24313
Published: 2025-08-12
Description: Improper access control for some Device Plugins for Kubernetes software maintained by Intel before version 0.32.0 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01329.html
CVE: CVE-2025-24323
Published: 2025-08-12
Description: Improper access control in some firmware package and LED mode toggle tool for some Intel(R) PCIe Switch software before version MR4_1.0b1 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01339.html
CVE: CVE-2025-24324
Published: 2025-08-12
Description: Integer overflow or wraparound in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 2.8 (LOW)
CWE: CWE-190
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-24325
Published: 2025-08-12
Description: Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-24484
Published: 2025-08-12
Description: Improper input validation in the Linux kernel-mode driver for some Intel(R) 800 Series Ethernet before version 1.17.2 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01296.html
CVE: CVE-2025-24486
Published: 2025-08-12
Description: Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE: CVE-2025-24511
Published: 2025-08-12
Description: Improper initialization in the Linux kernel-mode driver for some Intel(R) I350 Series Ethernet before version 5.19.2 may allow an authenticated user to potentially enable Information disclosure via data exposure.
CVSS Score: 3.3 (LOW)
CWE: CWE-665
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE: CVE-2025-24515
Published: 2025-08-12
Description: NULL pointer dereference for some Intel(R) Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01299.html
CVE: CVE-2025-24520
Published: 2025-08-12
Description: Insertion of sensitive information into log file for some Intel(R) Local Manageability Service software before version 2514.7.16.0 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-532
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01342.html
CVE: CVE-2025-24523
Published: 2025-08-12
Description: Protection mechanism failure for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 3.5 (LOW)
CWE: CWE-693
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE: CVE-2025-24835
Published: 2025-08-12
Description: Protection mechanism failure in the Intel(R) Graphics Driver for the Intel(R) Arc(TM) B-Series graphics before version 32.0.101.6737 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01299.html
CVE: CVE-2025-24840
Published: 2025-08-12
Description: Improper access control for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-284
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE: CVE-2025-24921
Published: 2025-08-12
Description: Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an unauthenticated user to potentially enable information disclosure via adjacent access.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-707
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE: CVE-2025-24923
Published: 2025-08-12
Description: Uncontrolled search path in some Intel(R) AI for Enterprise Retrieval-augmented Generation software may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01338.html
CVE: CVE-2025-25273
Published: 2025-08-12
Description: Insufficient control flow management in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-691
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE: CVE-2025-26403
Published: 2025-08-12
Description: Out-of-bounds write in the memory subsystem for some Intel(R) Xeon(R) 6 processors when using Intel(R) SGX or Intel(R) TDX may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-787
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01367.html; https://lists.debian.org/debian-lts-announce/2025/10/msg00027.html
CVE: CVE-2025-26404
Published: 2025-08-12
Description: Uncontrolled search path for some Intel(R) DSA software before version 25.2.15.9 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01347.html
CVE: CVE-2025-26470
Published: 2025-08-12
Description: Incorrect default permissions for some Intel(R) Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01345.html
CVE: CVE-2025-26472
Published: 2025-08-12
Description: Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html
CVE: CVE-2025-26697
Published: 2025-08-12
Description: Uncontrolled resource consumption in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable denial of service.
CVSS Score: 3.3 (LOW)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE: CVE-2025-26863
Published: 2025-08-12
Description: Uncontrolled resource consumption in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 may allow an authenticated user to potentially enable denial of service.
CVSS Score: 3.8 (LOW)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01335.html
CVE: CVE-2025-27250
Published: 2025-08-12
Description: Uncontrolled resource consumption for some Edge Orchestrator software before version 24.11.1 for Intel(R) Tiber(TM) Edge Platform may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 3.5 (LOW)
CWE: CWE-400
References: https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01317.html