Eason

Missing authorization in the `registration()` function allows unauthenticated attackers to create new user accounts with the 'customer' role and obtain authentication cookies. This occurs because the function, accessed via the `wp ajax nopriv registration action` AJAX action, fails to perform nonce verification, capability checks, or verify the `users can register` option before executing `wp insert user()`. This bypasses administrative settings that disable user registration.

Missing authorization and capability checks in the `add custom sidebar()` and `remove custom sidebar()` AJAX handlers allow unauthenticated attackers to modify or delete data. These handlers are exposed through `wp ajax nopriv *` hooks and write directly to the `octagon custom sidebar` option using the `update option()` function. This flaw enables the creation of arbitrary custom widget areas or the deletion of existing custom sidebars, which may cause widgets assigned to those areas to stop rendering.

The issue is related to improper input validation in the UEFI firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. This could lead to security breaches, but specific details about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited are not provided.

The issue is related to improper input validation in UEFI firmware for some Intel(R) Processors. This may allow a privileged user to potentially enable escalation of privilege via local access.

The issue concerns improper input validation in the UEFI firmware for some Intel(R) Processors. This may allow a privileged user to potentially enable information disclosure via local access.

The issue is related to improper input validation in the XmlCli feature for UEFI firmware, which may allow a privileged user to potentially enable escalation of privilege via local access.

The issue is related to improper buffer restrictions in the UEFI firmware for some Intel(R) Processors. This may allow a privileged user to potentially enable information disclosure via local access.

The issue is related to improper input validation in UEFI firmware for some Intel(R) Processors. This may allow a privileged user to potentially enable escalation of privilege via local access.

The issue is related to improper input validation in UEFI firmware for some Intel(R) processors. This may allow a privileged user to potentially enable escalation of privilege via local access. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

The issue concerns improper initialization in the UEFI firmware OutOfBandXML module, which may allow a privileged user to potentially enable information disclosure via local access.

Name of the Vulnerable Software and Affected Versions: Intel(R) Server Board S2600BP Family (affected versions not specified) Description: The issue is related to improper input validation in UEFI firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. This could be exploited by an attacker to gain higher privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Intel(R) Server Board S2600ST Family BIOS and Firmware Update software all versions Description: The issue is related to improper input validation in the BIOS and firmware update software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could be exploited by an attacker to elevate their privileges. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Intel CIP software versions prior to 2.4.10852 Description: The issue is related to improper input validation in Intel CIP software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could potentially be exploited by an attacker to gain elevated privileges. Recommendations: For versions prior to 2.4.10852, update to version 2.4.10852 or later to resolve the issue. As a temporary workaround, consider restricting local access to the system to minimize the risk of exploitation.

The issue exists due to improper input validation in kernel mode driver for some Intel(R) Server Board S2600ST Family firmware. This may allow a privileged user to potentially enable escalation of privilege via local access.

The issue is related to an arbitrary memory write vulnerability in the BIOS firmware of certain Supermicro motherboards. This vulnerability can be exploited to impact the confidentiality, integrity, and availability of protected information.

A vulnerability was discovered in the SMM callout component of Supermicro BMC controller firmware, related to a buffer overflow in memory. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

An arbitrary memory write vulnerability was discovered, which may allow an attacker to impact the confidentiality, integrity, and availability of protected information. The issue is related to a buffer overflow in the BMC controller's firmware.

The issue is related to an Improper Input Validation vulnerability in an externally developed component of the Dell Client Platform BIOS. A high-privileged attacker with local access could potentially exploit this, leading to code execution.

The issue is related to an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution.

The issue is related to an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.