Lucene search
K

1768 matches found

Vulnrichment
Vulnrichment
added 2024/02/06 2:23 a.m.13 views

CVE-2024-20820

Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read...

4.4CVSS6.5AI score0.00037EPSS
Exploits1References1
Cvelist
Cvelist
added 2024/02/06 2:23 a.m.20 views

CVE-2024-20820

Improper input validation in bootloader prior to SMR Feb-2024 Release 1 allows local privileged attackers to cause an Out-Of-Bounds read...

4.4CVSS6.9AI score0.00037EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/02/06 12:0 a.m.2 views

SAMSUNG Mobile devices buffer error vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. SAMSUNG Mobile devices SMR Feb-2024 Release 1 suffers from a buffer error vulnerability that stems from a security issue in the bootloader that could...

7.1CVSS6.7AI score0.00037EPSS
Exploits1References2
Fedora
Fedora
added 2024/02/05 1:46 a.m.29 views

[SECURITY] Fedora 38 Update: grub2-2.06-114.fc38

The GRand Unified Bootloader GRUB is a highly configurable and customizable bootloader with modular architecture. It supports a rich variety of kernel formats, file systems, computer architectures and hardware devices...

6.8CVSS7.3AI score0.00031EPSS
Exploits0
Fedora
Fedora
added 2024/02/05 1:26 a.m.24 views

[SECURITY] Fedora 39 Update: grub2-2.06-116.fc39

The GRand Unified Bootloader GRUB is a highly configurable and customizable bootloader with modular architecture. It supports a rich variety of kernel formats, file systems, computer architectures and hardware devices...

6.8CVSS7.3AI score0.00031EPSS
Exploits0
OpenVAS
OpenVAS
added 2024/02/05 12:0 a.m.18 views

Fedora: Security Advisory for grub2 (FEDORA-2024-633dc7e183)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.9AI score0.00031EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2024/02/05 12:0 a.m.20 views

Fedora: Security Advisory (FEDORA-2024-53d986312e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.8CVSS6.8AI score0.00031EPSS
Exploits0References7
RedHat Linux
RedHat Linux
added 2024/01/25 10:52 a.m.1 views

grub2: bypass the GRUB password protection feature

An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a fil...

6.8CVSS5.7AI score0.00031EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2024/01/25 8:59 a.m.5 views

grub2: bypass the GRUB password protection feature

An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a fil...

6.8CVSS5.7AI score0.00031EPSS
Exploits0References5
OSV
OSV
added 2024/01/25 12:0 a.m.24 views

ALSA-2024:0468 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2: bypass the...

6.8CVSS6.7AI score0.00031EPSS
Exploits0References4
The Hacker News
The Hacker News
added 2024/01/17 1:51 p.m.60 views

PAX PoS Terminal Flaw Could Allow Attackers to Tamper with Transactions

The point-of-sale PoS terminals from PAX Technology are impacted by a collection of high-severity vulnerabilities that can be weaponized by threat actors to execute arbitrary code. The STM Cyber R&D team, which reverse engineered the Android-based devices manufactured by the Chinese firm owing to...

7.8CVSS8.7AI score0.00394EPSS
Exploits5
BDU FSTEC
BDU FSTEC
added 2024/01/17 12:0 a.m.1 views

The vulnerability of the ASP Bootloader component of AMD’s microprogramming software allows a hacker to disclose sensitive information or cause system failures.

The vulnerability of the ASP Bootloader microprogramming system for AMD processors is related to the state of competition. Exploiting this vulnerability can allow attackers to disclose protected information or cause malfunctions in the system...

5.7CVSS0.00056EPSS
Exploits0References3
NVD
NVD
added 2024/01/16 8:15 a.m.14 views

CVE-2023-52111

Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity...

7.5CVSS7.5AI score0.00054EPSS
Exploits0References2
OSV
OSV
added 2024/01/16 8:15 a.m.2 views

CVE-2023-52111

Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity...

7.5CVSS5.8AI score
Exploits0References2
Prion
Prion
added 2024/01/16 8:15 a.m.13 views

Authorization

Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity...

5CVSS7.2AI score0.00054EPSS
Exploits0References2Affected Software2
Vulnrichment
Vulnrichment
added 2024/01/16 7:55 a.m.11 views

CVE-2023-52111

Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity...

6.9AI score0.00054EPSS
Exploits0References2
CVE
CVE
added 2024/01/16 7:55 a.m.37 views

CVE-2023-52111

CVE-2023-52111 concerns an authorization vulnerability in the BootLoader module of Huawei HarmonyOS. The issue is described as affecting theBootLoader component with potential integrity impact; CVSS v3.1 base score 7.5 (High) with Network attack vector, no user interaction required, and no confid...

7.5CVSS7.5AI score0.00054EPSS
Exploits0References2Affected Software2
Cvelist
Cvelist
added 2024/01/16 7:55 a.m.15 views

CVE-2023-52111

Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity...

7.7AI score0.00054EPSS
Exploits0References2
NVD
NVD
added 2024/01/15 2:15 p.m.16 views

CVE-2023-4818

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...

7.6CVSS7.3AI score0.0032EPSS
Exploits1References4
OSV
OSV
added 2024/01/15 2:15 p.m.2 views

CVE-2023-4818

PAX A920 device allows to downgrade bootloader due to a bug in its version check. The signature is correctly checked and only bootloader signed by PAX can be used. The attacker must have physical USB access to the device in order to exploit this vulnerability...

7.6CVSS5.8AI score0.0032EPSS
Exploits1References4
Rows per page
Query Builder