5086 matches found
CVE-2021-46754: Improper Input Validation
Insufficient input validation in the ASP AMD Secure Processor bootloader may allow an attacker with a compromised Uapp or ABL to coerce the bootloader into exposing sensitive information to the SMU System Management Unit resulting in a potential loss of confidentiality and integrity...
CVE-2021-46764: Out-of-bounds Write
Improper validation of DRAM addresses in SMU may allow an attacker to overwrite sensitive memory locations within the ASP potentially resulting in a denial of service...
PT-2023-12586
Name of the Vulnerable Software and Affected Versions ASP bootloader affected versions not specified Description The issue is related to a Time-of-check Time-of-use TOCTOU condition in the BIOS2PSP command. This may allow an attacker with a malicious BIOS to create a race condition, causing the A...
CVE-2021-46753: Undefined Security Weakness
Failure to validate the length fields of the ASP AMD Secure Processor sensor fusion hub headers may allow an attacker with a malicious Uapp or ABL to map the ASP sensor fusion hub region and overwrite data structures leading to a potential loss of confidentiality and integrity...
AMD Server Vulnerabilities – May 2023
Bulletin ID: AMD-SB-3001 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in the AMD Secure Processor ASP, AMD System Management Unit SMU, AMD Secure Encrypted Virtualization SEV and other platform components...
Client Vulnerabilities – May 2023
Bulletin ID: AMD-SB-4001 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary Potential vulnerabilities in AMD Secure Processor ASP, AMD System Management Unit SMU, and other platform components were discovered, and mitigations are being...
PT-2023-12571 · Amd · Asp
Name of the Vulnerable Software and Affected Versions: ASP AMD Secure Processor bootloader affected versions not specified Description: The issue is related to insufficient validation of inputs in the SVC MAP USER STACK component of the ASP bootloader. This may allow an attacker with a malicious...
aspdallas.org Cross Site Scripting vulnerability OBB-3303326
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
asp-pr.co.uk Cross Site Scripting vulnerability OBB-3278224
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-29909
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via the AddWlanMacList interface at /goform/aspForm...
CVE-2023-29917
H3C Magic R200 version R200V100R004 was discovered to contain a stack overflow via go parameter at /goform/aspForm...
H3C Magic R200 Buffer Error Vulnerability
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V100R004 version, which stems from the discovery of a stack overflow vulnerability contained via the SetAPWifiorLedInfoById interface of /goform/aspForm...
H3C Magic R200 Buffer Error Vulnerability
The H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V100R004 version, which stems from the discovery of an UpdateSnat interface via /goform/aspForm that contains a stack overflow vulnerability...
H3C Magic R200 Buffer Error Vulnerability
H3C Magic R200 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R200 R200V100R004 version, which stems from a CMD parameter found to contain a stack overflow vulnerability via /goform/aspForm...
InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal
Exploit Title: InnovaStudio WYSIWYG Editor 5.4 - Unrestricted File Upload / Directory Traversal Date: 11/04/2023 Exploit Author: Zer0FauLT [email protected] Vendor Homepage: innovastudio.com Product: Asset Manager Version: = Asset Manager ASP Version 5.4 Tested on: Windows 10 and Windows...
CVE-2023-27803
H3C Magic R100 R100V100R005.bin was discovered to contain a stack overflow via the EdittriggerList interface at /goform/aspForm. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted payload...
H3C Magic R100 Buffer Error Vulnerability
The H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100 R100V100R005.bin version, which originates from a discovery containing a stack overflow via the EditvsList parameter of /goform/aspForm. An attacker could exploit the vulnerability to...
H3C Magic R100 Buffer Error Vulnerability
The H3C Magic R100 is a router from China's Xinhua San H3C. A security vulnerability exists in the H3C Magic R100 R100V100R005.bin version, which originates from a discovery containing a stack overflow via the DelvsList interface of /goform/aspForm. An attacker could exploit the vulnerability to...
vb-asp-php.com Cross Site Scripting vulnerability OBB-3246325
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...