Lucene search
+L

2279 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/04 12:00 a.m.•4 views

CVE-2024-20397: Improper Access Control

A vulnerability in the bootloader of Cisco NX-OS Software could allow an unauthenticated attacker with physical access to an affected device, or an authenticated, local attacker with administrative credentials, to bypass NX-OS image signature verification. This vulnerability is due to insecure...

5.2CVSS8.1AI score0.00298EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 8:15 p.m.•28 views

CVE-2018-9369

In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS0.00082EPSS
SaveExploits0References1
NVD
NVD
•added 2024/11/19 8:15 p.m.•37 views

CVE-2018-9372

In cmdflashmmcsparseimg of dlcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege in the bootloader with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS0.0009EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 7:23 p.m.•40 views

CVE-2018-9372

In cmdflashmmcsparseimg of dlcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege in the bootloader with no additional execution privileges needed. User interaction is not needed for exploitation...

0.0009EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 7:23 p.m.•29 views

CVE-2018-9372

In cmdflashmmcsparseimg of dlcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege in the bootloader with no additional execution privileges needed. User interaction is not needed for exploitation...

7.2AI score0.0009EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/11/19 7:17 p.m.•34 views

CVE-2018-9369

In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

0.00082EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/11/19 7:17 p.m.•19 views

CVE-2018-9369

In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.2AI score0.00082EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•29 views

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...

7.8CVSS7AI score0.0009EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•14 views

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android LG component Bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...

7.5CVSS7AI score0.00211EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•23 views

PT-2024-10649 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or version information is provided. Description: The issue is related to a possible out of bounds write in the bootloader due to a missing bounds check. This could lead to a local escalation of privilege with no additiona...

7.8CVSS6.5AI score0.0009EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•19 views

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...

7.8CVSS7AI score0.00082EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•3 views

CVE-2018-9369: Incorrect Default Permissions

In bootloader there is fastboot command allowing user specified kernel command line arguments. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

7.8CVSS5.8AI score0.00082EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/19 12:00 a.m.•4 views

CVE-2018-9372: Out-of-bounds Write

In cmdflashmmcsparseimg of dlcommands.c, there is a possible out of bounds write due to a missing bounds check. This could lead to a local escalation of privilege in the bootloader with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.0009EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•21 views

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...

7.8CVSS7AI score0.00089EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/11/19 12:00 a.m.•4 views

PT-2024-10646

Name of the Vulnerable Software and Affected Versions Bootloader affected versions not specified Description The issue concerns a fastboot command in the bootloader that allows user-specified kernel command line arguments, potentially leading to local escalation of privilege without requiring...

7.8CVSS5.9AI score0.00082EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/11/19 12:00 a.m.•18 views

Google Android 安全漏洞

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in the Google Android MediaTek component bootloader. An attacker can exploit this vulnerability to achieve elevation of privilege...

7.8CVSS7AI score0.00092EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2024/11/15 12:00 a.m.•22 views

The vulnerability of the GRUB loader program, related to bypassing authentication methods through spoofing techniques, allows a perpetrator to circumvent the authentication process and enhance their privileges within the system.

The vulnerability of the GRUB bootloader is related to the ability to bypass authentication methods using spoofing techniques. Exploiting this vulnerability allows an attacker to circumvent the authentication process and enhance their privileges within the system...

5.6CVSS5.5AI score
SaveExploits0Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/15 12:00 a.m.•26 views

The vulnerability of GRUB’s NTFS driver, a loader program for operating systems, relates to reading memory beyond the buffer boundaries, allowing an attacker to read the contents of the RAM.

The vulnerability of the GRUB loader driver for NTFS operating systems involves reading memory beyond the buffer boundaries. Exploiting this vulnerability could allow an attacker to read the contents of the RAM...

5.3CVSS5.7AI score
SaveExploits0Affected Software1
CNNVD
CNNVD
•added 2024/11/13 12:00 a.m.•20 views

grub2 安全漏洞

grub2 is a Linux system boot program from the American GNU community. A security vulnerability exists in grub2 that originates from allowing an attacker with access to the grub shell to access files on an encrypted disk...

7CVSS7.9AI score0.00323EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/10/31 12:00 a.m.•17 views

The vulnerability of the bootloader component in Android operating systems of Samsung mobile devices allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the bootloader component in Android mobile devices from Samsung is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow attackers to compromise the confidentiality, integrity, and accessibility of protected information...

7.2CVSS5.5AI score0.00317EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder