deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-28402
Published: 2024-05-16
Description: Improper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html
CVE: CVE-2023-35192
Published: 2024-05-16
Description: Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE: CVE-2023-38417
Published: 2024-05-16
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE: CVE-2023-38420
Published: 2024-05-16
Description: Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.8 (LOW)
CWE: CWE-754, CWE-703
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-38581
Published: 2024-05-16
Description: Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-120, CWE-121
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-38654
Published: 2024-05-16
Description: Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE: CVE-2023-39433
Published: 2024-05-16
Description: Improper access control for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html
CVE: CVE-2023-39929
Published: 2024-05-16
Description: Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01012.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01012.html
CVE: CVE-2023-40070
Published: 2024-05-16
Description: Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-1220
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-40071
Published: 2024-05-16
Description: Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.3 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE: CVE-2023-40155
Published: 2024-05-16
Description: Uncontrolled search path for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-269, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html
CVE: CVE-2023-40536
Published: 2024-05-16
Description: Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-421
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE: CVE-2023-41082
Published: 2024-05-16
Description: Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-395
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html
CVE: CVE-2023-41092
Published: 2024-05-16
Description: Unchecked return value in SDM firmware for Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 7.6 (HIGH)
CWE: CWE-252
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01007.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01007.html
CVE: CVE-2023-41234
Published: 2024-05-16
Description: NULL pointer dereference in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-476
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-41961
Published: 2024-05-16
Description: Uncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE: CVE-2023-42433
Published: 2024-05-16
Description: Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00965.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00965.html
CVE: CVE-2023-42668
Published: 2024-05-16
Description: Incorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards based on Intel(R) 62X Chipset may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00962.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00962.html
CVE: CVE-2023-42773
Published: 2024-05-16
Description: Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-707, CWE-707
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-43487
Published: 2024-05-16
Description: Improper access control in some Intel(R) CST before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01021.html
CVE: CVE-2023-43629
Published: 2024-05-16
Description: Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE: CVE-2023-43745
Published: 2024-05-16
Description: Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 2.8 (LOW)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01013.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01013.html
CVE: CVE-2023-43748
Published: 2024-05-16
Description: Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE: CVE-2023-43751
Published: 2024-05-16
Description: Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driver software before versions 31.0.101.3790/31.0.101.2114 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00937.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00937.html
CVE: CVE-2023-45217
Published: 2024-05-16
Description: Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284, CWE-1220
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-45221
Published: 2024-05-16
Description: Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE: CVE-2023-45315
Published: 2024-05-16
Description: Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665, CWE-707
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-45320
Published: 2024-05-16
Description: Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-269, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01034.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01034.html
CVE: CVE-2023-45733
Published: 2024-05-16
Description: Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via local access.
CVSS Score: 2.8 (LOW)
CWE: CWE-1298
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01051.html
CVE: CVE-2023-45736
Published: 2024-05-16
Description: Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-277
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-45743
Published: 2024-05-16
Description: Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01031.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01031.html
CVE: CVE-2023-45745
Published: 2024-05-16
Description: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-45845
Published: 2024-05-16
Description: Improper conditions check for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.20 may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE: CVE-2023-45846
Published: 2024-05-16
Description: Incomplete cleanup in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-459, CWE-459
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-46103
Published: 2024-05-16
Description: Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-1281
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01052.html
CVE: CVE-2023-46689
Published: 2024-05-16
Description: Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.8 (HIGH)
CWE: CWE-707, CWE-707
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-46691
Published: 2024-05-16
Description: Use after free in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.9 (HIGH)
CWE: CWE-416, CWE-416
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE: CVE-2023-47165
Published: 2024-05-16
Description: Improper conditions check in the Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enable denial of service via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01041.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01041.html
CVE: CVE-2023-47169
Published: 2024-05-16
Description: Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-92, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE: CVE-2023-47210
Published: 2024-05-16
Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-20, CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE: CVE-2023-47282
Published: 2024-05-16
Description: Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 3.9 (LOW)
CWE: CWE-787, CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE: CVE-2023-47855
Published: 2024-05-16
Description: Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-20
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01036.html; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2023-47859
Published: 2024-05-16
Description: Improper access control for some Intel(R) Wireless Bluetooth products for Windows before version 23.20 may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE: CVE-2023-48368
Published: 2024-05-16
Description: Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-20, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE: CVE-2023-48727
Published: 2024-05-16
Description: NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 3.3 (LOW)
CWE: CWE-395, CWE-395
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE: CVE-2023-49614
Published: 2024-05-16
Description: Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege and information disclosure.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01050.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01050.html
CVE: CVE-2024-21772
Published: 2024-05-16
Description: Uncontrolled search path in some Intel(R) Advisor software before version 2024.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01047.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01047.html
CVE: CVE-2024-21774
Published: 2024-05-16
Description: Uncontrolled search path in some Intel(R) Processor Identification Utility software before versions 6.10.34.1129, 7.1.6 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01054.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01054.html
CVE: CVE-2024-21777
Published: 2024-05-16
Description: Uncontrolled search path in some Intel(R) Quartus(R) Prime Pro Edition Design software before version 23.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html
CVE: CVE-2024-21788
Published: 2024-05-16
Description: Uncontrolled search path in some Intel(R) GPA software before version 2023.4 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427, CWE-427
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01067.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01067.html
CVE: CVE-2024-21792
Published: 2024-05-16
Description: Time-of-check Time-of-use race condition in Intel(R) Neural Compressor software before version 2.5.0 may allow an authenticated user to potentially enable information disclosure via local access.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-367
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01109.html
CVE: CVE-2024-21809
Published: 2024-05-16
Description: Improper conditions check for some Intel(R) Quartus(R) Prime Lite Edition Design software before version 23.1 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-92, CWE-754
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01055.html