Lucene search
+L

6611 matches found

CVE
CVE
•added 2024/07/10 2:39 a.m.•77 views

CVE-2023-32467

Dell Edge Gateway BIOS (versions 3200 and 5200) contains an out-of-bounds write in the BIOS, allegedly allowing a local authenticated attacker with high privileges to access UEFI code and possibly achieve arbitrary code execution or privilege escalation. The issue is linked to the DXE driver init...

8.2CVSS8.1AI score0.00168EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/07/10 2:32 a.m.•16 views

CVE-2023-32472

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or...

5.7CVSS8AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/10 2:32 a.m.•43 views

CVE-2023-32472

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or...

5.7CVSS0.00168EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/10 2:32 a.m.•79 views

CVE-2023-32472

Dell Edge Gateway BIOS versions 3200 and 5200 are affected by an out-of-bounds write vulnerability in the System Management Mode (SMM). A local authenticated attacker with high privileges could potentially cause arbitrary code execution or privilege escalation. A fix is available: update the BIOS...

8.2CVSS8AI score0.00168EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/10 12:00 a.m.•6 views

CVE-2023-32467: Improper Initialization

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some UEFI code, leading to arbitrary code execution or escalation of privile...

8.2CVSS6.6AI score0.00168EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/10 12:00 a.m.•5 views

CVE-2023-32472: Out-of-bounds Write

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or...

8.2CVSS6.6AI score0.00168EPSS
SaveExploits0References1
CNVD
CNVD
•added 2024/07/05 12:00 a.m.•41 views

Dell BIOS Input Validation Error Vulnerability (CNVD-2024-31393)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that originates from the inclusion of incorrect input validation. A locally authenticated attacker with administrator privileges could...

6.7CVSS6.6AI score0.00147EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
•added 2024/07/03 12:00 a.m.•21 views

HPESBCR04666 rev.1 - Certain HPE Cray Servers Using Certain AMD EPYC Processors, AMD-SB-7009: AMD Processor Security Notice, Local Arbitrary Code Execution Vulnerability

Potential Security Impact: Local: Arbitrary Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Cray EX235a Accelerator Blade prior to BIOS 1.8.0 in HFP 24.3.1 HPE Cray EX235n Server prior to BIOS 1.3.1 in HFP 23.9 HPE Cray EX425 Compute Blade prior to BIOS 1.7.2 in...

7.7CVSS6.1AI score0.0016EPSS
SaveExploits0
NVD
NVD
•added 2024/07/02 7:15 a.m.•47 views

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

6.7CVSS0.00147EPSS
SaveExploits0References1
OSV
OSV
•added 2024/07/02 7:15 a.m.•20 views

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

6.7CVSS5.8AI score0.00147EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/02 6:20 a.m.•20 views

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

5.1CVSS6.9AI score0.00147EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/02 6:20 a.m.•52 views

CVE-2024-0158

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

5.1CVSS0.00147EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/02 6:20 a.m.•99 views

CVE-2024-0158

CVE-2024-0158 relates to Dell BIOS, where an improper input validation flaw could let a locally authenticated administrator modify a UEFI variable, causing denial of service and privilege escalation. Affected software is the Dell BIOS (details on exact versions are not consistently specified acro...

6.7CVSS7.1AI score0.00147EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/07/02 12:00 a.m.•19 views

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell USA. The Dell BIOS has an input validation error vulnerability that originates from the inclusion of incorrect input validation. A locally authenticated attacker with administrator privileges could...

6.7CVSS6.5AI score0.00147EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/02 12:00 a.m.•6 views

CVE-2024-0158: Improper Input Validation

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability to modify a UEFI variable, leading to denial of service and escalation of privileges...

6.7CVSS6.1AI score0.00147EPSS
SaveExploits0References1
OSV
OSV
•added 2024/06/28 7:15 p.m.•17 views

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

7.8CVSS5.9AI score0.00117EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/28 7:15 p.m.•62 views

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

7.8CVSS0.00117EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/06/28 7:00 p.m.•46 views

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

0.00117EPSS
SaveExploits0References1
CVE
CVE
•added 2024/06/28 7:00 p.m.•92 views

CVE-2022-27540

A Time-of-Check to Time-of-Use (TOCTOU) vulnerability exists in the HP BIOS for certain HP PC products. This flaw could potentially allow an attacker to achieve arbitrary code execution , denial of service , and information disclosure . HP has released BIOS updates to mitigate this vulnerability;...

7.8CVSS7.4AI score0.00117EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/06/28 7:00 p.m.•21 views

CVE-2022-27540

A potential Time-of-Check to Time-of Use TOCTOU vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability...

7.7AI score0.00117EPSS
SaveExploits0References1
Rows per page
Query Builder