6196 matches found
Input validation
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
CVE-2022-24418
CVE-2022-24418 concerns Dell BIOS, where an input validation error in the BIOS code enables an authenticated local attacker to gain arbitrary code execution in SMM via a System Management Interrupt (SMI). The root cause is improper input validation within Dell BIOS, specifically when handling SMI...
CVE-2022-24418
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
CVE-2022-24417
The CVE-2022-24417 entry concerns Dell BIOS where an improper input validation flaw in the BIOS allows a local authenticated attacker to trigger arbitrary code execution during System Management Mode (SMM) via a Supervisory Management Interrupt (SMI). Affected component: Dell BIOS embedded on the...
CVE-2022-24417
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM...
Dell BIOS 输入验证错误漏洞
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...
Dell BIOS 输入验证错误漏洞
Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by an authenticated attacker to obtain arbitrary code execution during SMM by using SMI...
SUSE SLES12 Security Update : kernel-firmware (SUSE-SU-2022:1846-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1846-1 advisory. - Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO device to write to...
SUSE SLED15 / SLES15 Security Update : kernel-firmware (SUSE-SU-2022:1840-1)
The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1840-1 advisory. - Failure to flush the Translation Lookaside Buffer TLB of the I/O memory management unit IOMMU may lead an IO...
bios-pro.com Cross Site Scripting vulnerability OBB-2624242
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2022:1751-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1751-1 advisory. Update AMD ucode and SEV firmware - CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376, CVE-2021-26375, CVE-2021-26378,...
HPESBHF04306 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Processors, INTEL-SA-00617, 2022.1 IPU - Intel Processor Advisory, Local Disclosure of Information Vulnerability
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m750 Server Blade - Prior to H091.5004152022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...
HPESBHF04305 rev.1 - Certain HPE Moonshot/Edgeline Servers Using Intel Software Guard Extensions (SGX), INTEL-SA-00614, 2022.1 IPU - Intel SGX Advisory, Local Disclosure of Information Vulnerability
Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant m710x Server Blade - Prior to H071.9604142022 HPE ProLiant m750 Server Blade - Prior to H091.5004152022 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- |...
The vulnerability of the reverse-trigger function of the System Management Interrupt (SMI) driver for Legacy BIOS notebook computers of Lenovo allows a hacker to execute arbitrary code with elevated privileges.
The vulnerability of the reverse-trigger function of the System Management Interrupt SMI driver for Legacy BIOS notebook computers of Lenovo is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...
2022.1 IPU – BIOS Advisory
Summary: Potential security vulnerabilities in the BIOS firmware or BIOS authenticated code module for some Intel® Processors may allow escalation of privilege or information disclosure. Intel is releasing BIOS updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID:...
AMD BIOS Denial of Service Vulnerability
AMD BIOS is the base input and output system for AMD. A denial of service vulnerability exists in AMD BIOS, which stems from improper validation of the BIOS directory. An attacker could exploit this vulnerability to read content outside of a copy of the directory table in RAM, resulting in a...
CVE-2021-33122
Insufficient control flow management in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
CVE-2021-33103
Unintended intermediary in the BIOS authenticated code module for some IntelR Processors may allow a privileged user to potentially enable aescalation of privilege via local access...
