Lucene search
+L

623 matches found

Vulnrichment
Vulnrichment
added 2025/05/13 2:02 p.m.8 views

CVE-2024-42446 TOCTOU in SmmWhea

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

7.5CVSS7.6AI score0.00126EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/05/13 2:02 p.m.35 views

CVE-2024-42446 TOCTOU in SmmWhea

APTIOV contains a vulnerability in BIOS where an attacker may cause a Time-of-check Time-of-use TOCTOU Race Condition by local means. Successful exploitation of this vulnerability may lead to arbitrary code execution...

7.5CVSS0.00126EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/05/13 12:00 a.m.17 views

PT-2025-20900 · Aptiov · Aptiov

Name of the Vulnerable Software and Affected Versions: APTIOV affected versions not specified Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition in the BIOS, which can be exploited by an attacker through local means. This could potentially lead to arbitrary cod...

7.5CVSS6.6AI score0.00126EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2025/04/12 2:35 a.m.27 views

CVE-2025-29989

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial...

3.1CVSS6.7AI score0.00139EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/04/11 3:13 a.m.12 views

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

6.9CVSS7AI score0.00174EPSS
SaveExploits0References3
NVD
NVD
added 2025/04/10 2:15 a.m.30 views

CVE-2025-29989

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial...

4.4CVSS0.00139EPSS
SaveExploits0References1
CVE
CVE
added 2025/04/10 1:55 a.m.93 views

CVE-2025-29989

Dell Client Platform BIOS is affected by CVE-2025-29989, where the Security Version Number can be mutated to older values, enabling a high-privilege local attacker to cause BIOS upgrade denial. Affected component is the Dell Client Platform BIOS; root cause is SVN/version number manipulation. Doc...

4.4CVSS6.6AI score0.00139EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/04/10 1:55 a.m.9 views

CVE-2025-29989

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial...

3.1CVSS6.4AI score0.00139EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/10 1:55 a.m.48 views

CVE-2025-29989

Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to BIOS upgrade denial...

3.1CVSS0.00139EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/04/10 12:00 a.m.16 views

Dell Client Platform BIOS 安全漏洞

Dell Client Platform BIOS is a Client Platform BIOS from Dell USA. A security vulnerability exists in the Dell Client Platform BIOS that stems from a variable security version number, which could result in a BIOS upgrade denial...

4.4CVSS6.7AI score0.00139EPSS
SaveExploits0References2
NVD
NVD
added 2025/04/09 3:15 a.m.14 views

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

6.9CVSS0.00174EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/04/09 2:25 a.m.21 views

CVE-2025-29988

Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

6.9CVSS0.00174EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/04/09 12:00 a.m.18 views

PT-2025-15886 · Dell · Dell Client Platform Bios

Name of the Vulnerable Software and Affected Versions: Dell Client Platform BIOS affected versions not specified Description: The issue allows a high privileged attacker with local access to potentially exploit the vulnerability, leading to BIOS upgrade denial. This could be achieved by muting th...

4.4CVSS6.4AI score0.00139EPSS
SaveExploits0References9
CNNVD
CNNVD
added 2025/04/09 12:00 a.m.13 views

Dell Client Platform BIOS 安全漏洞

Dell Client Platform BIOS is a client platform BIOS from Dell USA. The Dell Client Platform BIOS is vulnerable to a buffer overflow vulnerability that originates from an application boundary error when handling untrusted input. No detailed vulnerability details are provided at this time...

6.9CVSS6.9AI score0.00174EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/16 10:18 p.m.13 views

CVE-2025-2295

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

3.5CVSS6.7AI score0.00236EPSS
SaveExploits0References3
NVD
NVD
added 2025/03/14 10:15 p.m.14 views

CVE-2025-2295

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

3.5CVSS0.00236EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/14 10:15 p.m.14 views

AZL-58803 CVE-2025-2295 affecting package edk2 for versions less than 20240524git3e722403cd16-14

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

3.5CVSS6.6AI score0.00236EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/14 10:15 p.m.7 views

UBUNTU-CVE-2025-2295

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

3.5CVSS6.7AI score0.00236EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2025/03/14 9:35 p.m.14 views

CVE-2025-2295

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

3.5CVSS5.9AI score0.00236EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/03/14 12:00 a.m.15 views

PT-2025-11308

Name of the Vulnerable Software and Affected Versions: EDK2 affected versions not specified Description: The issue is related to an Integer Overflow or Wraparound in the BIOS of EDK2, which can be triggered by a user through network means. A successful exploitation of this issue may lead to a...

9.1CVSS6.3AI score0.75116EPSS
SaveExploits3References153
Rows per page
Query Builder