13 matches found
EUVD-2024-42800
Malicious code in bioql PyPI...
CVE-2021-42060
An issue was discovered in Insyde InsydeH2O Kernel 5.0 through 05.08.41, Kernel 5.1 through 05.16.41, Kernel 5.2 before 05.23.22, and Kernel 5.3 before 05.32.22. An Int15ServiceSmm SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode...
CVE-2021-42113
An issue was discovered in StorageSecurityCommandDxe in Insyde InsydeH2O with Kernel 5.1 before 05.14.28, Kernel 5.2 before 05.24.28, and Kernel 5.3 before 05.32.25. An SMM callout vulnerability allows an attacker to hijack execution flow of code running in System Management Mode. Exploiting this...
CVE-2024-47540
GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...
CVE-2024-47540
GStreamer is a library for constructing graphs of media-handling components. An uninitialized stack variable vulnerability has been identified in the gstmatroskademuxaddwvpkheader function within matroska-demux.c. When size allocator-memunmapfull or mem-allocator-memunmap. This vulnerability coul...
CVE-2024-47540
CVE-2024-47540 affects GStreamer, caused by an uninitialized stack variable in gst_matroska_demux_add_wvpk_header (matroska-demux.c). When size
CVE-2022-32223: Uncontrolled Search Path Element
Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This vulnerability can be exploited if the victim has the following dependencies on a Windows machine: OpenSSL has been installed and “C:\Program Files\Common Files\SSL\openssl.cnf”...
Insyde InsydeH2O permission permission and access control issues vulnerability
Insyde InsydeH2O is a C source from Insyde Software Taiwan, China that implements the new technology "EFI/UEFI" specification, designed to replace the traditional BIOS Basic Input/Output System. The vulnerability could be exploited to hijack the execution flow of code running in system...
PT-2022-11823
Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O with kernel 5.5 before 05.51.45 Insyde InsydeH2O with kernel 5.4 before 05.43.45 Insyde InsydeH2O with kernel 5.3 before 05.35.45 Insyde InsydeH2O with kernel 5.2 before 05.26.45 Insyde InsydeH2O with kernel 5.1 before 05.16.4...
PT-2022-11539
Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O Kernel versions 5.0 through 05.08.41 Insyde InsydeH2O Kernel versions 5.1 through 05.16.41 Insyde InsydeH2O Kernel versions 5.2 before 05.23.22 Insyde InsydeH2O Kernel versions 5.3 before 05.32.22 Description An issue was...
PT-2022-11543
Name of the Vulnerable Software and Affected Versions Insyde InsydeH2O with Kernel 5.1 before 05.14.28 Insyde InsydeH2O with Kernel 5.2 before 05.24.28 Insyde InsydeH2O with Kernel 5.3 before 05.32.25 Description An issue was discovered in StorageSecurityCommandDxe, allowing an attacker to hijack...
PT-2022-16448
Name of the Vulnerable Software and Affected Versions InsydeH2O with kernel versions prior to 05.08.41 InsydeH2O with kernel versions prior to 05.16.29 InsydeH2O with kernel versions prior to 05.26.29 InsydeH2O with kernel versions prior to 05.35.29 InsydeH2O with kernel versions prior to 05.43.2...
