3507 matches found
CVE-2022-36338
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver FwBlockServiceSmm, creating SMM, leads to arbitrary code execution. An attacker can replace the pointer to the UEFI boot service GetVariable with a pointer to malware, and then...
CVE-2022-35893
The CVE-2022-35893 issue affects Insyde InsydeH2O (kernel 5.0–5.5). A memory corruption fault in the FvbServicesRuntimeDxe driver permits writes to SMRAM, enabling escalation to SMM. Public details indicate the vulnerability resides in InsydeH2O and is associated with SMM memory corruption, with ...
CVE-2022-35893
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM...
CVE-2022-36338
CVE-2022-36338 (Siemens InsydeH2O) affects InsydeH2O BIOS/firmware (kernel 5.0–5.5). The issue is an SMM callout vulnerability in the SMM driver FwBlockServiceSmm that creates SMM and allows arbitrary code execution. An attacker can replace the pointer to the UEFI boot service GetVariable with ma...
PT-2022-23315 · Insyde · Insydeh2O
Name of the Vulnerable Software and Affected Versions: Insyde InsydeH2O versions 5.0 through 5.5 Description: An issue was discovered in Insyde InsydeH2O, where an SMM callout vulnerability in the SMM driver FwBlockServiceSmm leads to arbitrary code execution. This occurs when creating SMM,...
WorkOrder CMS 0.1.0 Cross Site Scripting / SQL Injection Vulnerabilities
Exploit Title: WorkOrder CMS 0.1.0 Cross-Site Scripting XSS Date: Sep 22, 2022 Exploit Author: Chokri Hammedi Vendor Homepage: https://github.com/romzes13/WorkOrderCMS Software Link: https://github.com/romzes13/WorkOrderCMS/archive/refs/tags/v0.1.0.zip Version: 0.1.0 Payload:...
CVE-2022-35894
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure...
Information disclosure
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure...
CVE-2022-35894
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The SMI handler for the FwBlockServiceSmm driver uses an untrusted pointer as the location to copy data to an attacker-specified buffer, leading to information disclosure...
CVE-2022-35894
CVE-2022-35894 affects Insyde InsydeH2O BIOS (kernel versions 5.0–5.5). The vulnerability stems from the SMI handler for the FwBlockServiceSmm driver using an untrusted pointer as the destination to copy data, enabling information disclosure to an attacker-controlled buffer. Public sources consis...
Code injection
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM callout vulnerability in the SMM driver in UsbLegacyControlSmm leads to possible arbitrary code execution in SMM and escalation of privileges. An attacker could overwrite the function pointers in the EFIBOOTSERVICES...
CVE-2022-35408
CVE-2022-35408 affects Insyde InsydeH2O BIOS (versions 5.0–5.5). A vulnerability in the UsbLegacyControlSmm SMM driver enables arbitrary code execution in SMM and privilege escalation by overwriting EFI_BOOT_SERVICES pointers before the USB SMI handler runs; this is not exploitable from OS code. ...
CVE-2022-35896
An issue SMM memory leak vulnerability in SMM driver SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure...
CVE-2022-35896
An issue SMM memory leak vulnerability in SMM driver SMRAM was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An attacker can dump SMRAM contents via the software SMI provided by the FvbServicesRuntimeDxe driver to read the contents of SMRAM, leading to information disclosure...
CVE-2022-35896
The CVE-2022-35896 issue affects InsydeH2O BIOS (InsydeH2O) affecting SMM memory handling via the FvbServicesRuntimeDxe driver. The root cause is a memory leak/read path in the SMM driver that could allow an attacker with local access to dump SMRAM contents, leading to information disclosure. Aff...
Memory corruption
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. The FwBlockSericceSmm driver does not properly validate input parameters for a software SMI routine, leading to memory corruption of arbitrary addresses including SMRAM, and possible arbitrary code execution...
CVE-2022-35895
CVE-2022-35895 affects Insyde InsydeH2O BIOS (kernel 5.0–5.5). The vulnerability lies in the FwBlockSericceSmm driver, which fails to validate input for a software SMI routine, enabling memory corruption of arbitrary addresses including SMRAM and potentially arbitrary code execution. Exploitation...
WordPress 5.0.x < 5.0.17 Multiple Vulnerabilities
According to its self-reported version number, the detected WordPress application is affected by multiple vulnerabilities : - A SQL injection vulnerability within the Link API. - A Cross-Site Scripting XSS vulnerability on the Plugins screen. - An output escaping issue within themeta. Note that t...
Fedora: Security Advisory for rubygem-puma (FEDORA-2022-52d0032596)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
