deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-46842
Published: 2024-05-16
Description: Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and
other modes.  This in particular means that they may set registers used
to pass 32-bit-mode hypercall arguments to values outside of the range
32-bit code would be able to set them to.

When processing of hypercalls takes a considerable amount of time,
the hypervisor may choose to invoke a hypercall continuation.  Doing so
involves putting (perhaps updated) hypercall arguments in respective
registers.  For guests not running in 64-bit mode this further involves
a certain amount of translation of the values.

Unfortunately internal sanity checking of these translated values
assumes high halves of registers to always be clear when invoking a
hypercall.  When this is found not to be the case, it triggers a
consistency check in the hypervisor and causes a crash.

CVSS Score: 6.5 (MEDIUM)
CWE: CWE-843
References: https://xenbits.xenproject.org/xsa/advisory-454.html; http://xenbits.xen.org/xsa/advisory-454.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3/
CVE: CVE-2024-20326
Published: 2024-05-16
Description: A vulnerability in the ConfD CLI and the Cisco  Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.


This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78, CWE-77
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8
CVE: CVE-2024-20389
Published: 2024-05-16
Description: A vulnerability in the ConfD CLI and the Cisco  Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system.


This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user.
CVSS Score: 7.8 (HIGH)
CWE: CWE-266
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nso-rwpesc-qrQGnh3f; https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cnfd-rwpesc-ZAOufyx8
CVE: CVE-2024-31142
Published: 2024-05-16
Description: Because of a logical error in XSA-407 (Branch Type Confusion), the
mitigation is not applied properly when it is intended to be used.
XSA-434 (Speculative Return Stack Overflow) uses the same
infrastructure, so is equally impacted.

For more details, see:
  https://xenbits.xen.org/xsa/advisory-407.html
  https://xenbits.xen.org/xsa/advisory-434.html

CVSS Score: 7.5 (HIGH)
CWE: CWE-693
References: https://xenbits.xenproject.org/xsa/advisory-455.html; http://xenbits.xen.org/xsa/advisory-455.html; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5OK6MH75S7YWD34EWW7QIZTS627RIE3/
CVE: CVE-2024-34582
Published: 2024-05-16
Description: Sunhillo SureLine through 8.10.0 on RICI 5000 devices allows cgi/usrPasswd.cgi userid_change XSS within the Forgot Password feature.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/silent6trinity/CVE-2024-34582; https://github.com/silent6trinity/CVE-2024-34582
CVE: CVE-2024-34905
Published: 2024-05-16
Description: FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120, CWE-120
References: https://github.com/CloudWise-OpenSource/FlyFish/issues/191; https://github.com/CloudWise-OpenSource/FlyFish/issues/191
CVE: CVE-2024-34957
Published: 2024-05-16
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://github.com/Gr-1m/cms/blob/main/1.md; https://github.com/Gr-1m/cms/blob/main/1.md
CVE: CVE-2024-34958
Published: 2024-05-16
Description: idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/banner_deal.php?mudi=add
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://github.com/Gr-1m/cms/blob/main/2.md; https://github.com/Gr-1m/cms/blob/main/2.md
CVE: CVE-2024-35039
Published: 2024-05-16
Description: idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area.
CVSS Score: 3.8 (LOW)
CWE: CWE-352
References: https://github.com/ywf7678/cms/blob/main/1.md; https://github.com/ywf7678/cms/blob/main/1.md
CVE: CVE-2023-48643
Published: 2024-05-16
Description: Shrubbery tac_plus 2.x, 3.x. and 4.x through F4.0.4.28 allows unauthenticated Remote Command Execution. The product allows users to configure authorization checks as shell commands through the tac_plus.cfg configuration file. These are executed when a client sends an authorization request with a username that has pre-authorization directives configured. However, it is possible to inject additional commands into these checks because strings from TACACS+ packets are used as command-line arguments. If the installation lacks a a pre-shared secret (there is no pre-shared secret by default), then the injection can be triggered without authentication. (The attacker needs to know a username configured to use a pre-authorization command.) NOTE: this is related to CVE-2023-45239 but the issue is in the original Shrubbery product, not Meta's fork.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-94
References: https://github.com/takeshixx/tac_plus-pre-auth-rce; https://github.com/takeshixx/tac_plus-pre-auth-rce
CVE: CVE-2024-34273
Published: 2024-05-16
Description: njwt up to v0.4.0 was discovered to contain a prototype pollution in the Parser.prototype.parse method.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-1321
References: https://github.com/chrisandoryan/vuln-advisory/blob/main/nJwt/CVE-2024-34273.md; https://github.com/chrisandoryan/vuln-advisory/blob/main/nJwt/CVE-2024-34273.md
CVE: CVE-2024-34751
Published: 2024-05-16
Description: Deserialization of Untrusted Data vulnerability in WebToffee Order Export & Order Import for WooCommerce.This issue affects Order Export & Order Import for WooCommerce: from n/a through 2.4.9.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-502
References: https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-for-woocommerce-plugin-2-4-9-php-object-injection-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/order-import-export-for-woocommerce/wordpress-order-export-order-import-for-woocommerce-plugin-2-4-9-php-object-injection-vulnerability?_s_id=cve
CVE: CVE-2024-34760
Published: 2024-05-16
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPBlockart Magazine Blocks allows Stored XSS.This issue affects Magazine Blocks: from n/a through 1.3.6.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/magazine-blocks/wordpress-magazine-blocks-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/magazine-blocks/wordpress-magazine-blocks-plugin-1-3-6-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-34805
Published: 2024-05-16
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Webvitaly iFrame allows Stored XSS.This issue affects iFrame: from n/a through 5.0.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://patchstack.com/database/vulnerability/iframe/wordpress-iframe-plugin-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/iframe/wordpress-iframe-plugin-5-0-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2024-34808
Published: 2024-05-16
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.2.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-22
References: https://patchstack.com/database/vulnerability/jch-optimize/wordpress-jch-optimize-plugin-4-2-0-path-traversal-vulnerability?_s_id=cve; https://patchstack.com/database/vulnerability/jch-optimize/wordpress-jch-optimize-plugin-4-2-0-path-traversal-vulnerability?_s_id=cve
CVE: CVE-2024-35176
Published: 2024-05-16
Description:  REXML is an XML toolkit for Ruby. The REXML gem before 3.2.6 has a denial of service vulnerability when it parses an XML that has many `<`s in an attribute value. Those who need to parse untrusted XMLs may be impacted to this vulnerability. The REXML gem 3.2.7 or later include the patch to fix this vulnerability. As a workaround, don't parse untrusted XMLs.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/ruby/rexml/commit/4325835f92f3f142ebd91a3fdba4e1f1ab7f1cfb; https://github.com/ruby/rexml/security/advisories/GHSA-vg3r-rm7w-2xgh; https://www.ruby-lang.org/en/news/2024/05/16/dos-rexml-cve-2024-35176
CVE: CVE-2024-35185
Published: 2024-05-16
Description: Minder is a software supply chain security platform. Prior to version 0.0.49, the Minder REST ingester is vulnerable to a denial of service attack via an attacker-controlled REST endpoint that can crash the Minder server. The REST ingester allows users to interact with REST endpoints to fetch data for rule evaluation. When fetching data with the REST ingester, Minder sends a request to an endpoint and will use the data from the body of the response as the data to evaluate against a certain rule. If the response is sufficiently large, it can drain memory on the machine and crash the Minder server. The attacker can control the remote REST endpoints that Minder sends requests to, and they can configure the remote REST endpoints to return responses with large bodies. They would then instruct Minder to send a request to their configured endpoint that would return the large response which would crash the Minder server. Version 0.0.49 fixes this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-770
References: https://github.com/stacklok/minder/commit/065049336aac0621ee00a0bb2211f8051d47c14b; https://github.com/stacklok/minder/security/advisories/GHSA-fjw8-3gp8-4cvx; https://github.com/stacklok/minder/commit/065049336aac0621ee00a0bb2211f8051d47c14b
CVE: CVE-2024-35187
Published: 2024-05-16
Description: Stalwart Mail Server is an open-source mail server. Prior to version 0.8.0, attackers who achieved Arbitrary Code Execution as the stalwart-mail user (including web interface admins) can gain complete root access to the system. Usually, system services are run as a separate user (not as root) to isolate an attacker with Arbitrary Code Execution to the current service. Therefore, other system services and the system itself remains protected in case of a successful attack. stalwart-mail runs as a separate user, but it can give itself full privileges again in a simple way, so this protection is practically ineffective. Server admins who handed out the admin credentials to the mail server, but didn't want to hand out complete root access to the system, as well as any attacked user when the attackers gained Arbitrary Code Execution using another vulnerability, may be vulnerable. Version 0.8.0 contains a patch for the issue.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-863
References: https://github.com/stalwartlabs/mail-server/security/advisories/GHSA-rwp5-f854-ppg6; https://github.com/stalwartlabs/mail-server/security/advisories/GHSA-rwp5-f854-ppg6
CVE: CVE-2024-3640
Published: 2024-05-16
Description: An unquoted executable path exists in the Rockwell Automation FactoryTalk® Remote Access™ possibly resulting in remote code execution if exploited. While running the FTRA installer package, the executable path is not properly quoted, which could allow a threat actor to enter a malicious executable and run it as a System user. A threat actor needs admin privileges to exploit this vulnerability.
CWE: CWE-428
References: https://www.rockwellautomation.com/en-us/support/advisory.SD1671.html; https://www.rockwellautomation.com/en-us/support/advisory.SD1671.html
CVE: CVE-2024-4603
Published: 2024-05-16
Description: Issue summary: Checking excessively long DSA keys or parameters may be very
slow.

Impact summary: Applications that use the functions EVP_PKEY_param_check()
or EVP_PKEY_public_check() to check a DSA public key or DSA parameters may
experience long delays. Where the key or parameters that are being checked
have been obtained from an untrusted source this may lead to a Denial of
Service.

The functions EVP_PKEY_param_check() or EVP_PKEY_public_check() perform
various checks on DSA parameters. Some of those computations take a long time
if the modulus (`p` parameter) is too large.

Trying to use a very large modulus is slow and OpenSSL will not allow using
public keys with a modulus which is over 10,000 bits in length for signature
verification. However the key and parameter check functions do not limit
the modulus size when performing the checks.

An application that calls EVP_PKEY_param_check() or EVP_PKEY_public_check()
and supplies a key or parameters obtained from an untrusted source could be
vulnerable to a Denial of Service attack.

These functions are not called by OpenSSL itself on untrusted DSA keys so
only applications that directly call these functions may be vulnerable.

Also vulnerable are the OpenSSL pkey and pkeyparam command line applications
when using the `-check` option.

The OpenSSL SSL/TLS implementation is not affected by this issue.

The OpenSSL 3.0 and 3.1 FIPS providers are affected by this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-606, CWE-834
References: https://github.com/openssl/openssl/commit/3559e868e58005d15c6013a0c1fd832e51c73397; https://github.com/openssl/openssl/commit/53ea06486d296b890d565fb971b2764fcd826e7e; https://github.com/openssl/openssl/commit/9c39b3858091c152f52513c066ff2c5a47969f0d
CVE: CVE-2024-4609
Published: 2024-05-16
Description: A vulnerability exists in the Rockwell Automation FactoryTalk® View SE Datalog function that could allow a threat actor to inject a malicious SQL statement if the SQL database has no authentication in place or if legitimate credentials were stolen. If exploited, the attack could result in information exposure, revealing sensitive information. Additionally, a threat actor could potentially modify and delete the data in a remote database. An attack would only affect the HMI design time, not runtime.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20, CWE-89
References: https://www.rockwellautomation.com/en-us/support/advisory.SD1670.html; https://www.rockwellautomation.com/en-us/support/advisory.SD1670.html
CVE: CVE-2024-4956
Published: 2024-05-16
Description: Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]3923; https://support.sonatype.com/hc/en-us/articles/[PII_REDACTED]3923
CVE: CVE-2024-27260
Published: 2024-05-16
Description: IBM AIX could 7.2, 7.3, VIOS 3.1, and VIOS 4.1 allow a non-privileged local user to exploit a vulnerability in the invscout command to execute arbitrary commands.  IBM X-Force ID:  283985.
CVSS Score: 8.4 (HIGH)
CWE: CWE-250
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/283985; https://www.ibm.com/support/pages/node/7152543; https://exchange.xforce.ibmcloud.com/vulnerabilities/283985
CVE: CVE-2023-47717
Published: 2024-05-16
Description: IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service.  IBM X-Force ID:  271690.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/271690; https://www.ibm.com/support/pages/node/7152469; https://exchange.xforce.ibmcloud.com/vulnerabilities/271690
CVE: CVE-2024-1417
Published: 2024-05-16
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager application.
This issue affects AuthPoint Password Manager for MacOS versions before 1.0.6.


CVSS Score: 7.8 (HIGH)
CWE: CWE-77
References: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00006; https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00006
CVE: CVE-2024-3286
Published: 2024-05-16
Description: 
A buffer overflow vulnerability was identified in some Lenovo printers that could allow an unauthenticated user to trigger a device restart by sending a specially crafted web request.










CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://iknow.lenovo.com.cn/detail/421500; https://www.lenovoimage.com/psirt/notice/158605.html; https://iknow.lenovo.com.cn/detail/421500
CVE: CVE-2024-5023
Published: 2024-05-16
Description: Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Netflix ConsoleMe allows Command Injection.This issue affects ConsoleMe: before 1.4.0.
CWE: CWE-77
References: https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2024-002.md; https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2024-002.md
CVE: CVE-2024-31226
Published: 2024-05-16
Description: Sunshine is a self-hosted game stream host for Moonlight. Users who ran Sunshine versions 0.17.0 through 0.22.2 as a service on Windows may be impacted when terminating the service if an attacked placed a file named `C:\Program.exe`, `C:\Program.bat`, or `C:\Program.cmd` on the user's computer. This attack vector isn't exploitable unless the user has manually loosened ACLs on the system drive. If the user's system locale is not English, then the name of the executable will likely vary. Version 0.23.0 contains a patch for the issue. Some workarounds are available. One may identify and block potentially malicious software executed path interception by using application control tools, like Windows Defender Application Control, AppLocker, or Software Restriction Policies where appropriate. Alternatively, ensure that proper permissions and directory access control are set to deny users the ability to write files to the top-level directory `C:`. Require that all executables be placed in write-protected directories.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-428
References: https://github.com/LizardByte/Sunshine/commit/93e622342c4f3e9b34f5f265039b6775b8e33a7a; https://github.com/LizardByte/Sunshine/pull/2379; https://github.com/LizardByte/Sunshine/security/advisories/GHSA-r3rw-mx4q-7vfp
CVE: CVE-2024-4733
Published: 2024-05-16
Description: The ShiftController Employee Shift Scheduling plugin is vulnerable to PHP Object Injection via deserialization of untrusted input via the `hc3_session`-cookie in versions up to, and including, 4.9.57. This makes it possible for an authenticated attacker with contributor access-level or above to inject a PHP Object. No POP chain is present in the vulnerable plugin. If a POP chain is present via an additional plugin or theme installed on the target system, it could allow the attacker to delete arbitrary files, retrieve sensitive data, or execute code.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3087047%40shiftcontroller%2Ftrunk&old=3080165%40shiftcontroller%2Ftrunk&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/9c8ab916-240d-43c3-92d4-7efd75862a5e?source=cve; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3087047%40shiftcontroller%2Ftrunk&old=3080165%40shiftcontroller%2Ftrunk&sfp_email=&sfph_mail=
CVE: CVE-2022-37341
Published: 2024-05-16
Description: Improper access control in some Intel(R) Ethernet Adapters and Intel(R) Ethernet Controller I225 Manageability firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00756.html
CVE: CVE-2022-37410
Published: 2024-05-16
Description: Improper access control for some Intel(R) Thunderbolt driver software before version 89 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 7.0 (HIGH)
CWE: CWE-284, CWE-284
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00916.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00916.html
CVE: CVE-2023-22656
Published: 2024-05-16
Description: Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 3.9 (LOW)
CWE: CWE-125, CWE-125
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00935.html
CVE: CVE-2023-22662
Published: 2024-05-16
Description: Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some Intel(R) Server Board S2600BP products may allow a privileged user to potentially enable denial of service via local access.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-20
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01080.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01080.html
CVE: CVE-2023-24460
Published: 2024-05-16
Description: Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVSS Score: 8.2 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00831.html
CVE: CVE-2023-27504
Published: 2024-05-16
Description: Improper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 7.2 (HIGH)
CWE: CWE-92
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html
CVE: CVE-2023-28383
Published: 2024-05-16
Description: Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-92, CWE-119
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00814.html