CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

Linux Distros Unpatched Vulnerability : CVE-2024-56161

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode...

Linux Distros Unpatched Vulnerability : CVE-2024-38796

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in the PeCoffLoaderRelocateImage. An Attacker may cause memory corruption due to an overflow via an adjacent network. A successful...

Linux Distros Unpatched Vulnerability : CVE-2018-10916

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local...

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server’s server lies in its deserialization mechanism flaws, which allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Hitachi Vantara Pentaho Business Analytics Server lies in the shortcomings of its deserialization mechanism. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2025-0327

CWE-269: Improper Privilege Management vulnerability exists for two services of which one managing audit trail data and the other acting as server managing client request that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when an attacker with standa...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2025-23421

An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications...

Zoom Workplace Apps Out-of-Bounds Write Vulnerability

Zoom Workplace Apps is an app for multiple platforms including Linux, macOS, Windows, iOS and Android. Zoom Workplace Apps suffers from an out-of-bounds write vulnerability that stems from the application failing to properly validate boundaries when processing a specific request. An attacker coul...

CVE-2023-20582

Improper handling of invalid nested page table entries in the IOMMU may allow a privileged attacker to induce page table entry PTE faults to bypass RMP checks in SEV-SNP, potentially leading to a loss of guest memory integrity...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2023-31331

CVE-2023-31331 describes improper access control in the DRTM firmware of AMD client/embedded processors. A local, privileged attacker could perform multiple driver initializations, causing stack memory corruption with potential loss of integrity or availability. CVSSv3.1 base score is 3.0 (LOW) w...

CVE-2023-31331

Improper access control in the DRTM firmware could allow a privileged attacker to perform multiple driver initializations, resulting in stack memory corruption that could potentially lead to loss of integrity or availability...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2023-20515

CVE-2023-20515 affects the fTPM driver in the AMD trusted OS. Root cause: improper access control allowing a privileged local attacker to corrupt system memory, potentially impacting integrity, confidentiality, and availability. Affected component: fTPM driver within AMD trusted OS. Impact: memor...

Astra Linux – Vulnerability in linux-astra-modules-6.1, linux-6.1

The vulnerability of Linux Astra Modules’ kernel modules is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to access confidential data, compromise its integrity, and cause service failures...

AMD Graphics Driver February 2025 Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD Graphics Drivers, which might allow denial of service, loss of confidentiality, loss of integrity, or loss of availability. AMD is releasing AMD Graphics Driver for Windows to mitigate these vulnerabilities. AMD has released...

AMD Client Processor 安全漏洞

AMD Client Processor is a processor for client devices e.g., personal computers, laptops, etc. from UltraMicro Semiconductor AMD. A security vulnerability exists in AMD Client Processor that stems from incorrect access control in the DRTM firmware that could allow a privileged attacker to perform...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2025-1090)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2025-1087)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...