Lucene search
+L

5653 matches found

OSV
OSV
added 2025/08/14 2:15 p.m.3 views

CVE-2025-36581

Dell PowerEdge Platform versions 14G AMD BIOS v1.25.0 and prior, contains an Access of Memory Location After End of Buffer vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure...

5.5CVSS5.8AI score0.00133EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/14 12:0 a.m.19 views

CVE-2025-27846

CVE-2025-27846 affects ESPEC North America Web Controller 3 prior to 3.3.8. The root cause is unprotected GRUB and BIOS, enabling an attacker with physical access to obtain elevated privileges. Impact is elevated privileges with no user interaction required. Remediation per PT-Security is to upgr...

4.3CVSS7.1AI score0.00186EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/14 12:0 a.m.3 views

CVE-2025-27846

In ESPEC North America Web Controller 3 before 3.3.8, an attacker with physical access can gain elevated privileges because GRUB and the BIOS are unprotected...

6.9AI score0.00186EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/14 12:0 a.m.8 views

PT-2025-33295 · Espec North America · Espec North America Web Controller 3

Name of the Vulnerable Software and Affected Versions: ESPEC North America Web Controller 3 versions prior to 3.3.8 Description: An attacker with physical access can gain elevated privileges due to the lack of protection for GRUB and the BIOS. Recommendations: Update ESPEC North America Web...

4.3CVSS6.5AI score0.00186EPSS
SaveExploits0References4
HPE Security Bulletins
HPE Security Bulletins
added 2025/08/14 12:0 a.m.8 views

HPESBHF04926 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01313, 2025.3 IPU, Intel Xeon Processor Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEas...

7.2CVSS6.8AI score0.00154EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
added 2025/08/14 12:0 a.m.4 views

HPESBHF04927 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01312, Intel TDX Module Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.6008-07-2025 U63 ROM Family HPE...

3.3CVSS6.1AI score0.00148EPSS
SaveExploits0
NVD
NVD
added 2025/08/13 6:15 p.m.8 views

CVE-2024-5477

A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasin...

7.3CVSS0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/13 5:47 p.m.47 views

CVE-2024-5477

CVE-2024-5477 concerns HP System BIOS on some HP PC products. The vulnerability may allow privilege escalation, arbitrary code execution, denial of service, or information disclosure via a physical attack. Key details from connected documents: affected component is the System BIOS; mitigation is ...

7.3CVSS7.9AI score0.00169EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/13 5:47 p.m.19 views

CVE-2024-5477

A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasin...

7.3CVSS0.00169EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/13 12:0 a.m.9 views

HP PC 安全漏洞

HP PC is a computer product from Hewlett-Packard HP in the United States. HP PC has a security vulnerability that stems from a potential issue with System BIOS that could lead to elevated privileges or information disclosure...

7.3CVSS6.3AI score0.00169EPSS
SaveExploits0References1
HPE Security Bulletins
HPE Security Bulletins
added 2025/08/13 12:0 a.m.5 views

HPESBHF04925 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01192, UPLR3 - Intel TDX Module Software Advisory, Local Disclosure of Information Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.4011-08-2024 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to 2.4011-08-2024 U63 ROM Family HPE StoreEasy 1570 Performance -...

5.7CVSS6.1AI score0.0013EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
added 2025/08/13 12:0 a.m.3 views

HPESBHF04928 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01280, 2025.3 IPU, Intel Chipset Firmware Advisory, Multiple Vulnerabilities

Potential Security Impact: Local: Disclosure of Information, Escalation of Privilege; Remote: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1470 Performance - Prior to 2.6008-07-2025 U63 ROM Family HPE StoreEasy 1470 Storage - Prior to...

7.2CVSS6.6AI score0.00332EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/08/13 12:0 a.m.21 views

PT-2025-33042 · Hewlett Packard · Hp System Bios

Name of the Vulnerable Software and Affected Versions: HP System BIOS affected versions not specified Description: A security issue has been identified in the System BIOS for some HP PC products. A physical attack requiring specialized equipment and knowledge may allow for escalation of privilege...

7.3CVSS8AI score0.00169EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/08/12 11:38 p.m.4 views

SUSE CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

6.3CVSS6.8AI score0.00207EPSS
SaveExploits0References3
OSV
OSV
added 2025/08/12 3:15 p.m.5 views

CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

6.3CVSS7AI score
SaveExploits0References1
OSV
OSV
added 2025/08/12 3:15 p.m.4 views

UBUNTU-CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

6.3CVSS6.8AI score0.00207EPSS
SaveExploits0References4
OSV
OSV
added 2025/08/12 2:15 p.m.8 views

CVE-2025-22834

AMI APTIOV contains a vulnerability in BIOS where a user may cause “Improper Initialization” by local accessing. Successful exploitation of this vulnerability may leave the resource in an unexpected state and potentially impact confidentiality, integrity, and availability...

5.3CVSS5.8AI score
SaveExploits0References1
OSV
OSV
added 2025/08/12 2:15 p.m.4 views

CVE-2025-22830

APTIOV contains a vulnerability in BIOS where a skilled user may cause “Race Condition” by local access. A successful exploitation of this vulnerability may lead to resource exhaustion and impact Confidentiality, Integrity, and Availability...

6.7CVSS5.8AI score0.00094EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/12 2:13 p.m.47 views

CVE-2024-38805

CVE-2024-38805 is an EDK2 BIOS vulnerability where a user may cause an Integer Overflow or Wraparound via network, potentially causing a denial of service. Connected advisories confirm affected EDK2 implementations across Linux distributions (Oracle Linux ELSA advisories for OL8/OL9, Ubuntu USN-7...

6.3CVSS6.8AI score0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/08/12 2:13 p.m.5 views

CVE-2024-38805 iSCSI Remote Memory Corruption and Denial of Service

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...

6.3CVSS7AI score0.00207EPSS
SaveExploits0References1
Rows per page
Query Builder