Lucene search
K

660 matches found

RedhatCVE
RedhatCVE
added yesterday2 views

CVE-2025-35969

Uncontrolled search path for some IntelR Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

5.4CVSS5.3AI score0.00015EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/12 6:30 p.m.4 views

EUVD-2025-209790

Uncontrolled search path for some IntelR Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

5.4CVSS5.7AI score0.00015EPSS
Exploits0References2
NVD
NVD
added 2026/05/12 5:16 p.m.8 views

CVE-2025-35969

Uncontrolled search path for some IntelR Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

5.4CVSS0.00015EPSS
Exploits0References1
CVE
CVE
added 2026/05/12 4:35 p.m.12 views

CVE-2025-35969

Intel Server Firmware Update Utility before 16.0.12 is affected by CVE-2025-35969: an Uncontrolled search path flaw in Ring 3 (user applications) may allow privilege escalation via a local attack by an authenticated user with high complexity and requiring user interaction. The impact spans confid...

5.4CVSS5.7AI score0.00015EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.6 views

PT-2026-40076

Uncontrolled search path for some IntelR Server Firmware Update Utility Software before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of...

5.4CVSS5.7AI score0.00015EPSS
Exploits0References2
Intel
Intel
added 2026/05/12 12:0 a.m.7 views

Intel® Server Firmware Update Utility Software Advisory 

Summary: A potential security vulnerability in some Intel® Server Firmware Update Utility Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35969 Description: Uncontrolled search path fo...

5.4CVSS5.7AI score0.00015EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/02/16 7:30 p.m.3 views

CVE-2025-35999

Incorrect permission assignment for critical resource for some System Firmware Update Utility SysFwUpdt for IntelR Server Boards and IntelR Server Systems Based before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileg...

6.7CVSS5.4AI score0.00006EPSS
Exploits0References1
NVD
NVD
added 2026/02/10 5:16 p.m.3 views

CVE-2025-35999

Incorrect permission assignment for critical resource for some System Firmware Update Utility SysFwUpdt for IntelR Server Boards and IntelR Server Systems Based before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileg...

6.7CVSS0.00006EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/10 4:26 p.m.24 views

CVE-2025-35999

Incorrect permission assignment for critical resource for some System Firmware Update Utility SysFwUpdt for IntelR Server Boards and IntelR Server Systems Based before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileg...

6.7CVSS0.00006EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/10 4:26 p.m.2 views

CVE-2025-35999

Incorrect permission assignment for critical resource for some System Firmware Update Utility SysFwUpdt for IntelR Server Boards and IntelR Server Systems Based before version 16.0.12. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with a privileg...

6.7CVSS5.4AI score0.00006EPSS
Exploits0References1
CVE
CVE
added 2026/02/10 4:26 p.m.7 views

CVE-2025-35999

The CVE-2025-35999 entry concerns Intel System Firmware Update Utility (SysFwUpdt) on Intel Server Boards/Server Systems, affected before version 16.0.12. Affected component: SysFwUpdt; root cause: incorrect permission assignment for a critical resource in Ring 3. This enables a local attacker wi...

6.7CVSS5.4AI score0.00006EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.3 views

Intel Server Firmware Update Utility 输入验证错误漏洞

Intel Server Firmware Update Utility is a command-line tool developed by Intel Corporation. Versions prior to Intel Server Firmware Update Utility 16.0.12 contained a vulnerability related to input validation errors. This vulnerability stemmed from improper input validation, which could lead to...

7.5CVSS5.9AI score0.0003EPSS
Exploits0References1
Intel
Intel
added 2026/02/10 12:0 a.m.7 views

Intel® Server Board and Intel® Server System Firmware Update Utility Advisory

Summary: A potential security vulnerability in the Intel® Server System Firmware Update Utility for some Intel® Server Board may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-35999 Description:...

6.7CVSS5.4AI score0.00006EPSS
Exploits0
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.2 views

Intel Server Firmware Update Utility 安全漏洞

Intel Server Firmware Update Utility is a command-line tool developed by Intel Corporation. The Intel Server Firmware Update Utility has a security vulnerability, which stems from improper allocation of permissions for critical resources, potentially leading to an escalation of privileges...

6.7CVSS5.8AI score0.00006EPSS
Exploits0References1
Intel
Intel
added 2026/02/10 12:0 a.m.7 views

Intel® Chipset Driver Software Installer Advisory

Summary: A potential security vulnerability in some Intel® Chipset Driver Software installers for Windows software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36522 Description: Incorrect...

6.7CVSS5.3AI score0.00013EPSS
Exploits0
EUVD
EUVD
added 2026/01/14 6:31 p.m.3 views

EUVD-2023-36534

Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...

5.3CVSS5.1AI score0.00182EPSS
Exploits0References2
EUVD
EUVD
added 2026/01/14 6:31 p.m.1 views

EUVD-2023-35505

Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...

8.8CVSS5.8AI score0.00067EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 11:17 a.m.5 views

CVE-2021-0097

Path traversal in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access...

6.5CVSS7AI score0.00261EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:15 a.m.5 views

CVE-2021-0113

Out of bounds write in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable a denial of service via adjacent access...

6.5CVSS7.1AI score0.00121EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:15 a.m.6 views

CVE-2021-0070

Improper input validation in the BMC firmware for IntelR Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potentially enable an escalation of privilege via adjacent access...

8.8CVSS7.6AI score0.00113EPSS
Exploits0References1
Rows per page
Query Builder