Lucene search
K

1769 matches found

BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.0 views

The vulnerability of the first-stage bootloader in ESP32 microcontrollers’ microprogramming software allows a hacker to obtain secure boot keys.

The vulnerability of the first-stage Secure Boot loader of ESP32 microcontrollers’ microprogramming software is related to insufficient handling of exceptional states. Exploiting this vulnerability can allow attackers to obtain secure boot keys...

4.9CVSS0.00155EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/06/22 12:0 a.m.2 views

PT-2022-3178 · Honeywell +1 · Honeywell Experion Pks Safety Manager +1

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS Safety Manager version 5.02 Description: The issue is related to the use of hard-coded credentials in the Honeywell Experion PKS Safety Manager. The affected component is the POLO bootloader. An attacker with access to...

7.8CVSS4.4AI score0.00095EPSS
Exploits0References9
OSV
OSV
added 2022/06/21 2:39 p.m.4 views

CLSA-2022-1655822366 Update of grub2

Use CloudLinux vendor cert...

5.8AI score
Exploits0References1
OSV
OSV
added 2022/06/21 2:17 p.m.2 views

CLSA-2022-1655821067 Update of grub2

Use CloudLinux vendor cert...

5.8AI score
Exploits0References1
OpenVAS
OpenVAS
added 2022/06/19 12:0 a.m.9 views

Fedora: Security Advisory for shim-unsigned-aarch64 (FEDORA-2022-98830efc68)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.9AI score0.00024EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/06/19 12:0 a.m.8 views

Fedora: Security Advisory for shim (FEDORA-2022-98830efc68)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.9AI score0.00024EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2022/06/19 12:0 a.m.12 views

Fedora: Security Advisory for shim-unsigned-x64 (FEDORA-2022-98830efc68)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.8CVSS7.9AI score0.00024EPSS
Exploits0References2
Fedora
Fedora
added 2022/06/17 1:20 a.m.25 views

[SECURITY] Fedora 35 Update: shim-unsigned-x64-15.6-1

Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments...

7.8CVSS1.6AI score0.00024EPSS
Exploits0
Fedora
Fedora
added 2022/06/17 1:20 a.m.29 views

[SECURITY] Fedora 35 Update: shim-15.6-1

Initial UEFI bootloader that handles chaining to a trusted full bootloader under secure boot environments. This package contains the version signed by the UEFI signing service...

7.8CVSS3.4AI score0.00024EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2022/06/16 3:49 p.m.3 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00019EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 3:39 p.m.2 views

grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap

A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows an attacker to corrupt the data on the heap portion of the grub2's memory, leading to possible code execution and the circumvention of the secure boot mechanism...

4.5CVSS7.7AI score0.0006EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 3:39 p.m.2 views

grub2: Out-of-bound write when handling split HTTP headers

A flaw was found in grub2 when handling split HTTP headers. While processing a split HTTP header, grub2 wrongly advances its control pointer to the internal buffer by one position, which can lead to an out-of-bounds write. This flaw allows an attacker to leverage this issue by crafting a maliciou...

8.1CVSS7.4AI score0.00151EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 3:26 p.m.3 views

grub2: Out-of-bound write when handling split HTTP headers

A flaw was found in grub2 when handling split HTTP headers. While processing a split HTTP header, grub2 wrongly advances its control pointer to the internal buffer by one position, which can lead to an out-of-bounds write. This flaw allows an attacker to leverage this issue by crafting a maliciou...

8.1CVSS7.4AI score0.00151EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 3:26 p.m.1 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00019EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 2:57 p.m.4 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00019EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 1:52 p.m.3 views

grub2: shim_lock verifier allows non-kernel files to be loaded

A flaw was found in grub2. The shimlock verifier from grub2 allows non-kernel files to be loaded when secure boot is enabled, giving the possibility of unverified code or modules to be loaded when it should not be allowed...

7.8CVSS7.3AI score0.00019EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2022/06/16 1:52 p.m.4 views

grub2: Crafted PNG grayscale images may lead to out-of-bounds write in heap

A flaw was found in grub 2, where a crafted 16-bit grayscale PNG image may lead to an out-of-bounds write. This flaw allows an attacker to corrupt the data on the heap portion of the grub2's memory, leading to possible code execution and the circumvention of the secure boot mechanism...

4.5CVSS7.7AI score0.0006EPSS
Exploits0References4
CNVD
CNVD
added 2022/06/14 12:0 a.m.18 views

Google Android Information Disclosure Vulnerability (CNVD-2022-62203)

Google Android is a Linux-based open source operating system from Google, Inc. Bootloader is one of the bootloaders. The vulnerability stems from incorrect boundary checking, which could lead to out-of-bounds reads. An attacker could exploit the vulnerability to obtain sensitive information...

4.9CVSS3.3AI score0.00016EPSS
Exploits0References1
OpenVAS
OpenVAS
added 2022/06/11 12:0 a.m.21 views

Fedora: Security Advisory for grub2 (FEDORA-2022-27932fdd06)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.1CVSS6.8AI score0.00151EPSS
Exploits0References2
Fedora
Fedora
added 2022/06/10 1:15 a.m.55 views

[SECURITY] Fedora 36 Update: grub2-2.06-42.fc36

The GRand Unified Bootloader GRUB is a highly configurable and customizable bootloader with modular architecture. It supports a rich variety of kernel formats, file systems, computer architectures and hardware devices...

8.1CVSS1.5AI score0.00151EPSS
Exploits0
Rows per page
Query Builder