5058 matches found
CVE-2020-12951
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM System Management Mode operations...
Input validation
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service...
Race condition
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM System Management Mode operations...
Input validation
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...
CVE-2020-12944
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...
CVE-2020-12944
CVE-2020-12944 affects AMD Secure Processor (ASP) firmware, where insufficient validation of BIOS image length could allow arbitrary code execution. AMD documentation (AMD-SB-1027/1021) lists affected platforms across desktop, mobile and server AMD systems and provides mitigations via AGESA PI fi...
CVE-2020-12951
CVE-2020-12951 describes a race condition in the AMD Platform Security Processor (ASP) firmware that could allow less-privileged x86 code to perform ASP SMM operations. Connected sources confirm this vulnerability and tie it to AMD ASP/SMU firmware, with AMD advisories indicating mitigations via ...
CVE-2020-12951
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM System Management Mode operations...
CVE-2020-12946
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service...
CVE-2020-12946
CVE-2020-12946 affects AMD’s Platform Security Processor (ASP) firmware, where insufficient input validation for discrete TPM commands could cause loss of integrity and denial of service. The issue is discussed in AMD/SUZE bulletins and is addressed by updating to specific AGESA PI software versi...
PT-2021-9511
Name of the Vulnerable Software and Affected Versions ASP firmware affected versions not specified PSP FW affected versions not specified Description A race condition issue exists that could allow less privileged x86 code to perform SMM System Management Mode operations. This issue affects both A...
PT-2021-9510
Name of the Vulnerable Software and Affected Versions ASP firmware affected versions not specified Description The issue is related to insufficient input validation in ASP firmware for discrete TPM commands, which could lead to a potential loss of integrity and denial of service. Recommendations ...
CVE-2020-12946: Improper Input Validation
Insufficient input validation in ASP firmware for discrete TPM commands could allow a potential loss of integrity and denial of service...
CVE-2020-12944: Improper Input Validation
Insufficient validation of BIOS image length by ASP Firmware could lead to arbitrary code execution...
CVE-2020-12951: Concurrent Execution using Shared Resource with Improper Synchronization
Race condition in ASP firmware could allow less privileged x86 code to perform ASP SMM System Management Mode operations...
Informatica: Reflected Cross-Site Scripting/HTML Injection
The default ASP page at https://███/redirect/default.asp is vulnerable to reflected Cross-Site Scripting in the "url" parameter. To reproduce the issue just visit the following URL and an alert should pop up: - https://██████████/redirect/?url=%3Cscript%3Ealertdocument.domain%3C/script%3E It seem...
Hardcoded credentials
The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...
CVE-2021-39392
The management tool in MyLittleBackup up to and including 1.7 allows remote attackers to execute arbitrary code because machineKey is hardcoded the same for all customers' installations in web.config, and can be used to send serialized ASP code...
PT-2021-22577
Name of the Vulnerable Software and Affected Versions: MyLittleBackup versions up to and including 1.7 Description: The management tool in MyLittleBackup allows remote attackers to execute arbitrary code because the machineKey is hardcoded in web.config, and can be used to send serialized ASP cod...
