deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-29994
Published: 2022-05-12
Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=facilities/manage_facility&id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-10.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-10.md
CVE: CVE-2022-29995
Published: 2022-05-12
Description: Online Sports Complex Booking System 1.0 is vulnerable to SQL Injection via /scbs/admin/?page=clients/manage_client&id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-9.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Online-Sports-Complex-Booking-System/SQLi-9.md
CVE: CVE-2022-30279
Published: 2022-05-12
Description: An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing of a NULL pointer, leading to a crash of SNS. An attacker could exploit this vulnerability via forged sofbus lacbus traffic to cause a firmware crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://advisories.stormshield.eu/2022-015; https://advisories.stormshield.eu/2022-015
CVE: CVE-2022-1698
Published: 2022-05-12
Description: Allowing long password leads to denial of service in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-191, CWE-191
References: https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56; https://huntr.dev/bounties/f4ab747b-e89a-4514-9432-ac1ea56639f3; https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56
CVE: CVE-2022-1699
Published: 2022-05-12
Description: Uncontrolled Resource Consumption in GitHub repository causefx/organizr prior to 2.1.2000. This vulnerability can be abused by doing a DDoS attack for which genuine users will not able to access resources/applications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190, CWE-400
References: https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56; https://huntr.dev/bounties/3024b2bb-50ca-46a2-85db-1cc916791cda; https://github.com/causefx/organizr/commit/e4b4cff66c526f7b5bbaef0073c92c315c29bd56
CVE: CVE-2022-22413
Published: 2022-05-12
Description: IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 223022.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/223022; https://www.ibm.com/support/pages/node/6585628; https://exchange.xforce.ibmcloud.com/vulnerabilities/223022
CVE: CVE-2022-28919
Published: 2022-05-12
Description: HTMLCreator release_stable_2020-07-29 was discovered to contain a cross-site scripting (XSS) vulnerability via the function _generateFilename.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/splitbrain/dokuwiki/issues/3651; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DB7BXJKFALXHURED3OMJIQ4KEDGZOOWL/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JFL5KMLTSWOHTDHURW5W6YP2DV67IQFP/
CVE: CVE-2022-28920
Published: 2022-05-12
Description: Tieba-Cloud-Sign v4.9 was discovered to contain a cross-site scripting (XSS) vulnerability via the function strip_tags.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/MoeNetwork/Tieba-Cloud-Sign/issues/156; https://github.com/MoeNetwork/Tieba-Cloud-Sign/issues/156
CVE: CVE-2022-29298
Published: 2022-05-12
Description: SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://packetstormsecurity.com/files/167383/SolarView-Compact-6.00-Directory-Traversal.html; https://drive.google.com/file/d/1-RHw9ekVidP8zc0xpbzBXnse2gSY1xbH/view?usp=sharing; http://packetstormsecurity.com/files/167383/SolarView-Compact-6.00-Directory-Traversal.html
CVE: CVE-2022-29302
Published: 2022-05-12
Description: SolarView Compact ver.6.00 was discovered to contain a local file disclosure via /html/Solar_Ftp.php.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-552
References: https://drive.google.com/file/d/1Bfyk1Nx51HbFGYuDNFKoDxUrloEj-Rzx/view?usp=sharing; https://drive.google.com/file/d/1Bfyk1Nx51HbFGYuDNFKoDxUrloEj-Rzx/view?usp=sharing
CVE: CVE-2022-29303
Published: 2022-05-12
Description: SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html; https://drive.google.com/drive/folders/1tGr-WExbpfvhRg31XCoaZOFLWyt3r60g?usp=sharing; http://packetstormsecurity.com/files/167183/SolarView-Compact-6.0-Command-Injection.html
CVE: CVE-2022-29306
Published: 2022-05-12
Description: IonizeCMS v1.0.8.1 was discovered to contain a SQL injection vulnerability via the id_page parameter in application/models/article_model.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/ionize/ionize/issues/404; https://github.com/ionize/ionize/issues/404
CVE: CVE-2022-29307
Published: 2022-05-12
Description: IonizeCMS v1.0.8.1 was discovered to contain a command injection vulnerability via the function copy_lang_content in application/models/lang_model.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/ionize/ionize/issues/405; https://github.com/ionize/ionize/issues/405
CVE: CVE-2022-29738
Published: 2022-05-12
Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-2.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-2.md
CVE: CVE-2022-29739
Published: 2022-05-12
Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-3.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-3.md
CVE: CVE-2022-29741
Published: 2022-05-12
Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_fee.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-4.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-4.md
CVE: CVE-2022-29745
Published: 2022-05-12
Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via \mtms\classes\Master.php?f=delete_transaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-5.md
CVE: CVE-2022-29746
Published: 2022-05-12
Description: Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-6.md; https://github.com/k0xx11/bug_report/blob/main/vendors/oretnom23/Money-Transfer-Management-System/SQLi-6.md
CVE: CVE-2022-29998
Published: 2022-05-12
Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/clientStatus.php?client_id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-1.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-1.md
CVE: CVE-2022-29999
Published: 2022-05-12
Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?client_id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-2.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-2.md
CVE: CVE-2022-30000
Published: 2022-05-12
Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editPayment.php?recipt_no=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-4.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-4.md
CVE: CVE-2022-30001
Published: 2022-05-12
Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editAgent.php?agent_id=.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-3.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-3.md
CVE: CVE-2022-30002
Published: 2022-05-12
Description: Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editNominee.php?nominee_id=.
CVSS Score: 7.2 (HIGH)
CWE: CWE-89
References: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-5.md; https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-5.md
CVE: CVE-2021-0126
Published: 2022-05-12
Description: Improper input validation for the Intel(R) Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
CVSS Score: 8.0 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00519.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00519.html
CVE: CVE-2021-0153
Published: 2022-05-12
Description: Out-of-bounds write in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0154
Published: 2022-05-12
Description: Improper input validation in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0155
Published: 2022-05-12
Description: Unchecked return value in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-252, CWE-252
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0159
Published: 2022-05-12
Description: Improper input validation in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20, CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0188
Published: 2022-05-12
Description: Return of pointer value outside of expected range in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0189
Published: 2022-05-12
Description: Use of out-of-range pointer offset in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0190
Published: 2022-05-12
Description: Uncaught exception in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-755, CWE-755
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-0193
Published: 2022-05-12
Description: Improper authentication in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-287, CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00549.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00549.html
CVE: CVE-2021-0194
Published: 2022-05-12
Description: Improper access control in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via network access.
CVSS Score: 7.2 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00549.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00549.html
CVE: CVE-2021-26258
Published: 2022-05-12
Description: Improper access control for the Intel(R) Killer(TM) Control Center software before version 2.4.3337.0 may allow an authorized user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00644.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00644.html
CVE: CVE-2021-33069
Published: 2022-05-12
Description: Improper resource shutdown or release in firmware for some Intel(R) SSD, Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-404
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.solidigm.com/content/dam/solidigm/en/site/support/support-community/cve-(security)/documents/public-security-advisory.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33074
Published: 2022-05-12
Description: Protection mechanism failure in firmware for some Intel(R) SSD, Intel(R) SSD DC and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33075
Published: 2022-05-12
Description: Race condition in firmware for some Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33077
Published: 2022-05-12
Description: Insufficient control flow management in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow an unauthenticated user to potentially enable escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33078
Published: 2022-05-12
Description: Race condition within a thread in firmware for some Intel(R) Optane(TM) SSD and Intel(R) SSD DC Products may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-362, CWE-362
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33080
Published: 2022-05-12
Description: Exposure of sensitive system information due to uncleared debug information in firmware for some Intel(R) SSD DC, Intel(R) Optane(TM) SSD and Intel(R) Optane(TM) SSD DC Products may allow an unauthenticated user to potentially enable information disclosure or escalation of privilege via physical access.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-212, CWE-212
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33082
Published: 2022-05-12
Description: Sensitive information in resource not removed before reuse in firmware for some Intel(R) SSD and Intel(R) Optane(TM) SSD Products may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-212, CWE-212
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33083
Published: 2022-05-12
Description: Improper authentication in firmware for some Intel(R) SSD, Intel(R) Optane(TM) SSD, Intel(R) Optane(TM) SSD DC and Intel(R) SSD DC Products may allow an privileged user to potentially enable information disclosure via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-287
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html; https://www.solidigm.com/content/dam/newco-aem-site/master/site/support/Solidigm%20SA-000563%20rev1.1.pdf; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00563.html
CVE: CVE-2021-33103
Published: 2022-05-12
Description: Unintended intermediary in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33108
Published: 2022-05-12
Description: Improper input validation in the Intel(R) In-Band Manageability software before version 2.13.0 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00549.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00549.html
CVE: CVE-2021-33117
Published: 2022-05-12
Description: Improper access control for some 3rd Generation Intel(R) Xeon(R) Scalable Processors before BIOS version MR7, may allow a local attacker to potentially enable information disclosure via local access.
CVSS Score: 5.5 (MEDIUM)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00586.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33122
Published: 2022-05-12
Description: Insufficient control flow management in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33123
Published: 2022-05-12
Description: Improper access control in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33124
Published: 2022-05-12
Description: Out-of-bounds write in the BIOS authenticated code module for some Intel(R) Processors may allow a privileged user to potentially enable aescalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00601.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2021-33130
Published: 2022-05-12
Description: Insecure default variable initialization of Intel(R) RealSense(TM) ID Solution F450 before version 2.6.0.74 may allow an unauthenticated user to potentially enable information disclosure via physical access.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-1188, CWE-1188
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00595.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00595.html
CVE: CVE-2021-33135
Published: 2022-05-12
Description: Uncontrolled resource consumption in the Linux kernel drivers for Intel(R) SGX may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00603.html