Lucene search
+L

8225 matches found

CVE
CVE
•added 2025/06/10 4:15 p.m.•113 views

CVE-2023-20599

CVE-2023-20599 describes an improper register access control in AMD’s ASP Crypto Co-Processor (CCP). The issue may allow a privileged attacker to access CCP registers from x86, risking loss of control of cryptographic key pointers/indices and potentially compromising confidentiality and integrity...

7.9CVSS6.2AI score0.00178EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/10 4:15 p.m.•34 views

CVE-2023-20599

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor CCP registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality...

7.9CVSS0.00178EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/06/10 12:00 a.m.•17 views

PT-2025-24687

Name of the Vulnerable Software and Affected Versions ASP affected versions not specified Description The issue is related to improper register access control in ASP, which may allow a privileged attacker to perform unauthorized access to ASP's Crypto Co-Processor CCP registers from x86. This cou...

7.9CVSS6AI score0.00178EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/10 12:00 a.m.•4 views

CVE-2023-20599: Improper Access Control for Register Interface

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor CCP registers from x86 resulting in potential loss of control of cryptographic key pointer/index leading to loss of integrity or confidentiality...

7.9CVSS5.8AI score0.00178EPSS
SaveExploits0References1
Amd
Amd
•added 2025/06/10 12:00 a.m.•38 views

Unauthorized Access to AMD Secure Processor’s Crypto-Co-Processor

CVE Details Refer to Glossary for explanation of terms CVE| CVSS Score| CVE Description ---|---|--- CVE-2023-20599| 7.9 High CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N| Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto...

7.9CVSS7.1AI score0.00178EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
•added 2025/06/10 12:00 a.m.•25 views

HPESBHF04882 rev.1 - Certain HPE ProLiant AMD DL/XL Servers Using Certain AMD EPYC Processors, AMD-SB-7039: Unauthorized Access to AMD Secure Processor’s Crypto-Co-Processor, Local Unauthorized Access Vulnerability

Potential Security Impact: Local: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL325 Gen10 Plus server - Prior to v3.2008-07-2024 HPE ProLiant DL325 Gen10 Plus v2 server - Prior to v3.2008-07-2024 HPE ProLiant DL345 Gen10 Plus server - Prior to...

7.9CVSS6.1AI score0.00178EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/06/09 12:00 a.m.•11 views

Linux arch/arm/kernel/hw_breakpoint breakpoint_handler Heap Buffer Overflow DoS

The vulnerability of the breakpointhandler function in the arch/arm/kernel/hwbreakpoint.c module of the Linux operating system is related to incorrect checking of the return value of the function. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS6.5AI score0.00253EPSS
SaveExploits0References21Affected Software1
osv-oesa
osv-oesa
•added 2025/06/06 11:08 a.m.•18 views

OESA-2025-1587 microcode_ctl security update

This is a tool to transform and deploy microcode update for x86 CPUs. Security Fixes: Improper conditions check in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local...

8.8CVSS7AI score0.00256EPSS
SaveExploits0References2
osv-cve
osv-cve
•added 2025/06/05 8:15 p.m.•22 views

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS7.1AI score
SaveExploits0References1
NVD
NVD
•added 2025/06/05 8:15 p.m.•23 views

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS0.00254EPSS
SaveExploits0References1
osv-ubuntu
osv-ubuntu
•added 2025/06/05 8:15 p.m.•15 views

UBUNTU-CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS5.8AI score0.00254EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2025/06/05 7:20 p.m.•17 views

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

7.1AI score0.00254EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/06/05 7:20 p.m.•23 views

CVE-2025-5745

The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS5.3AI score0.00254EPSS
SaveExploits0
NVD
NVD
•added 2025/06/05 7:15 p.m.•27 views

CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS0.00306EPSS
SaveExploits0References1
osv-cve
osv-cve
•added 2025/06/05 7:15 p.m.•18 views

CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS7.1AI score
SaveExploits0References1
CVE
CVE
•added 2025/06/05 6:23 p.m.•155 views

CVE-2025-5702

The GNU C Library (glibc) version 2.39 and later contains a vulnerability in the strcmp implementation optimized for the Power10 processor . The root cause is that the implementation writes to vector registers v20 to v31 without saving their contents from the caller. Because these are defined as ...

5.6CVSS6.6AI score0.00306EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/06/05 6:23 p.m.•31 views

CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

7.1AI score0.00306EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/05 6:23 p.m.•30 views

CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

0.00306EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/06/05 6:23 p.m.•21 views

CVE-2025-5702

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...

5.6CVSS6.5AI score0.00306EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/06/05 12:03 a.m.•33 views

CVE-2025-23098

An issue was discovered in Samsung Mobile Processor Exynos 980, 990, 1080, 2100, 1280, 2200, 1380. A Use-After-Free in the mobile processor leads to privilege escalation...

7.8CVSS6.9AI score0.0016EPSS
SaveExploits0References1
Rows per page
Query Builder