Lucene search
+L

10882 matches found

BDU FSTEC
BDU FSTEC
added 2024/07/12 12:00 a.m.10 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the overflow of the buffer in the “heap”. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

8.3CVSS5.7AI score0.01127EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:00 a.m.11 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems relates to the use of an untrusted pointer. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.3CVSS5.4AI score0.01355EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:00 a.m.10 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to errors in processing input data length parameters. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.3CVSS5.4AI score0.00983EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:00 a.m.12 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.3CVSS5.7AI score0.01056EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:00 a.m.10 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions remotely...

8.3CVSS5.5AI score0.00983EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/12 12:00 a.m.8 views

The vulnerability in the implementation of the Secure Boot protocol for operating systems with Windows, which allows attackers to circumvent existing security restrictions.

The vulnerability of the Secure Boot protocol for Windows operating systems lies in the fact that operations are performed outside of the buffer in memory. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

8.8CVSS5.7AI score0.01162EPSS
SaveExploits0References2
CNVD
CNVD
added 2024/07/12 12:00 a.m.19 views

Microsoft Windows Secure Boot Security Feature Bypass Vulnerability (CNVD-2024-32551)

Microsoft Windows Secure Boot is a secure boot from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Windows Secure Boot, which can be exploited by attackers to bypass security features...

8CVSS6.5AI score0.01056EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/07/12 12:00 a.m.17 views

Microsoft Windows Secure Boot Security Feature Bypass Vulnerability (CNVD-2024-32545)

Microsoft Windows Secure Boot is a secure boot from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Windows Secure Boot, which can be exploited by attackers to bypass security features...

8CVSS6.5AI score0.00983EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/11 8:15 a.m.29 views

CVE-2024-38433

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution...

6.7CVSS0.00198EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/11 7:50 a.m.37 views

CVE-2024-38433 Nuvoton - CWE-305: Authentication Bypass by Primary Weakness

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution...

6.7CVSS0.00198EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/11 7:50 a.m.21 views

CVE-2024-38433 Nuvoton - CWE-305: Authentication Bypass by Primary Weakness

Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which could lead to arbitrary code execution...

6.7CVSS7.2AI score0.00198EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/11 12:00 a.m.13 views

Nuvoton NPCM7xx Security Vulnerability

Nuvoton NPCM7xx is a server remote management control chip from Nuvoton China. A security vulnerability exists in Nuvoton NPCM7xx Poleg BootBlock versions prior to v10.10.19, which originates from bypassing authentication via a major weakness, and can be exploited to modify the u-boot image heade...

6.7CVSS7.5AI score0.00198EPSS
SaveExploits0References2
Amazon
Amazon
added 2024/07/11 12:00 a.m.12 views

Important: kernel

Issue Overview: In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Disable kvmclock on all CPUs on shutdown CVE-2021-47110 In the Linux kernel, the following vulnerability has been resolved: x86/kvm: Teardown PV features on boot CPU as well CVE-2021-47112 Affected...

7.1CVSS6.6AI score0.00247EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/07/11 12:00 a.m.6 views

my-springsecurity-plus SQL Injection Vulnerability

my-springsecurity-plus is an RBAC backend privilege management system based on SpringBoot and SpringSecurity by codermy individual developer. A SQL injection vulnerability exists in my-springsecurity-plus prior to version 2024.07.03, which stems from an unknown function in file/api/role, where...

9.8CVSS7.9AI score0.00566EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/07/11 12:00 a.m.6 views

my-springsecurity-plus Security Vulnerabilities

my-springsecurity-plus is a SpringBoot and SpringSecurity based RBAC backend privilege management system by codermy individual developer. A security vulnerability exists in my-springsecurity-plus prior to 2024.07.03, which stems from some unknown functionality in file/api/dept, where manipulation...

9.8CVSS7.4AI score0.00473EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/07/11 12:00 a.m.10 views

my-springsecurity-plus SQL Injection Vulnerability

my-springsecurity-plus is an RBAC backend privilege management system based on SpringBoot and SpringSecurity by codermy individual developer. A SQL injection vulnerability exists in my-springsecurity-plus prior to version 2024.07.03, which stems from an unknown function in the file /api/dept/buil...

9.8CVSS7.9AI score0.00473EPSS
SaveExploits0References4
OSV
OSV
added 2024/07/10 4:15 p.m.7 views

CVE-2024-20456

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have root-system...

6.7CVSS5.8AI score0.00191EPSS
SaveExploits0References1
NVD
NVD
added 2024/07/10 4:15 p.m.48 views

CVE-2024-20456

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have root-system...

6.7CVSS0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/10 4:06 p.m.50 views

CVE-2024-20456

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have root-system...

6.7CVSS0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/07/10 4:06 p.m.18 views

CVE-2024-20456

A vulnerability in the boot process of Cisco IOS XR Software could allow an authenticated, local attacker with high privileges to bypass the Cisco Secure Boot functionality and load unverified software on an affected device. To exploit this successfully, the attacker must have root-system...

6.7CVSS7AI score0.00191EPSS
SaveExploits0References1
Rows per page
Query Builder