Lucene search
+L

4098 matches found

Positive Technologies
Positive Technologies
•added 2024/01/23 12:00 a.m.•12 views

PT-2024-21509

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.19 and 6.7.7 Description The issue concerns a null pointer dereference in the 'nvidia-shield' component of the Linux kernel. This occurs because the devm kasprintf function returns a pointer to dynamically...

5.5CVSS5.4AI score0.00237EPSS
SaveExploits0References25
SUSE CVE
SUSE CVE
•added 2024/01/11 2:46 a.m.•8 views

SUSE CVE-2022-36764

EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

7CVSS6.7AI score0.0029EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2024/01/11 2:46 a.m.•8 views

SUSE CVE-2022-36763

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

7CVSS6.7AI score0.00291EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2024/01/10 6:30 a.m.•50 views

CVE-2022-36765

A flaw was found in the CreateHob function in EDK2. An attacker, leveraging a local network, can initiate an integer overflow leading to a buffer overflow. This issue arises during size alignment within the CreateHob function, requiring activation in the PEI phase. Successful exploitation of this...

7CVSS7.5AI score0.0029EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•22 views

PT-2024-19047 · Tp Link · Tp-Link

Name of the Vulnerable Software and Affected Versions: TP-LINK products affected versions not specified Description: The issue allows a network-adjacent unauthenticated attacker with access to the product from the LAN port or Wi-Fi to execute arbitrary OS commands on the product that has...

8.8CVSS8AI score0.00531EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•25 views

PT-2024-1570

Name of the Vulnerable Software and Affected Versions TP-Link products affected versions not specified Description The issue allows a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows...

8.8CVSS8.7AI score0.01063EPSS
SaveExploits0References26
Positive Technologies
Positive Technologies
•added 2024/01/10 12:00 a.m.•24 views

PT-2024-1069 · Tp Link · Tp-Link Archer Ax5400 +2

Name of the Vulnerable Software and Affected Versions: TP-Link Archer AX3000 versions TP-Link Archer AX5400 versions TP-Link Archer AXE75 versions Description: The issue exists due to the lack of measures to neutralize special elements used in the operating system command. This allows a...

8.3CVSS7.5AI score0.00446EPSS
SaveExploits0References12
osv_cve
osv_cve
•added 2024/01/09 11:15 p.m.•22 views

CVE-2023-34333

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

7.8CVSS5.8AI score0.00178EPSS
SaveExploits0References1
NVD
NVD
•added 2024/01/09 11:15 p.m.•32 views

CVE-2023-34332

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

7.8CVSS7.5AI score0.00178EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/09 11:15 p.m.•21 views

CVE-2023-34332

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

7.8CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Prion
Prion
•added 2024/01/09 11:15 p.m.•30 views

Design/Logic Flaw

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

4.3CVSS6.9AI score0.00178EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2024/01/09 11:15 p.m.•33 views

Design/Logic Flaw

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

4.3CVSS6.8AI score0.00178EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/01/09 10:17 p.m.•45 views

CVE-2023-34333 Untrusted Pointer Dereference

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference via a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

7.8CVSS7.6AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/01/09 10:14 p.m.•40 views

CVE-2023-34332 Untrusted Pointer Dereference in BMC

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

7.8CVSS7.6AI score0.00178EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/01/09 10:14 p.m.•8 views

CVE-2023-34332 Untrusted Pointer Dereference in BMC

AMI’s SPx contains a vulnerability in the BMC where an Attacker may cause an untrusted pointer to dereference by a local network. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

7.8CVSS7.5AI score0.00178EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2024/01/09 4:15 p.m.•8 views

DEBIAN-CVE-2022-36764

EDK2 is susceptible to a vulnerability in the Tcg2MeasurePeImage function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

7.8CVSS6.8AI score0.0029EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/01/09 4:15 p.m.•13 views

AZL-39247 CVE-2022-36763 affecting package edk2 for versions less than 20230301gitf80f052277c8-40

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

7.8CVSS7AI score0.00291EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/01/09 4:15 p.m.•22 views

AZL-38308 CVE-2022-36763 affecting package edk2 for versions less than 20240223gitedc6681206c1-1

EDK2 is susceptible to a vulnerability in the Tcg2MeasureGptTable function, allowing a user to trigger a heap buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

7.8CVSS7AI score0.00291EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/01/09 4:15 p.m.•17 views

AZL-39424 CVE-2022-36765 affecting package hvloader for versions less than 1.0.1-3

EDK2 is susceptible to a vulnerability in the CreateHob function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

7.8CVSS7.1AI score0.0029EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/01/09 4:15 p.m.•44 views

CVE-2022-36765

EDK2 is susceptible to a vulnerability in the CreateHob function, allowing a user to trigger a integer overflow to buffer overflow via a local network. Successful exploitation of this vulnerability may result in a compromise of confidentiality, integrity, and/or availability...

7.8CVSS7.6AI score
SaveExploits0References3
Rows per page
Query Builder