Lucene search
+L

5169 matches found

BDU FSTEC
BDU FSTEC
added 2022/07/22 12:0 a.m.9 views

The vulnerability of the BIOS microprogramming system of Intel processors allows a hacker to enhance their privileges and execute arbitrary code.

The vulnerability of the BIOS microprogramming system of Intel processors is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code...

7.8CVSS7.8AI score0.00268EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/07/22 12:0 a.m.15 views

The vulnerability of the BIOS microprogramming system of Intel processors allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the BIOS microprogramming system of Intel processors is related to deficiencies in handling exceptional states. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00268EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/07/22 12:0 a.m.10 views

The vulnerability of the BIOS microprogramming system of Intel processors allows attackers to enhance their privileges and execute arbitrary code.

The vulnerability of the BIOS microprogramming system of Intel processors is related to access control deficiencies. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

7.8CVSS7.5AI score0.00253EPSS
SaveExploits0References3
Ubuntu
Ubuntu
added 2022/07/21 12:0 a.m.104 views

USN-5529-1: Linux kernel (OEM) vulnerabilities

It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly handle some error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1679...

7.8CVSS7.5AI score0.06451EPSS
SaveExploits2
OSV
OSV
added 2022/07/21 12:0 a.m.10 views

USN-5529-1 linux-oem-5.17 vulnerabilities

It was discovered that the Atheros ath9k wireless device driver in the Linux kernel did not properly handle some error conditions, leading to a use-after-free vulnerability. A local attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-1679...

7.8CVSS7.2AI score0.06451EPSS
SaveExploits2References12
Tenable Nessus
Tenable Nessus
added 2022/07/16 12:0 a.m.244 views

Debian DSA-5184-1 : xen - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5184 advisory. - Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via loca...

7.2CVSS8AI score0.06451EPSS
SaveExploits3References19
OSV
OSV
added 2022/07/15 11:3 a.m.6 views

OESA-2022-1750 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: Incomplete cleanup of multi-core shared buffers for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access.CVE-2022-21123 Incomplete cleanup of microarchitectural fill...

5.5CVSS6AI score0.06451EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2022/07/15 7:6 a.m.60 views

CVE-2022-28693

A flaw was found in hw. The unprotected alternative channel of return branch target prediction in some IntelR Processors may allow an authorized user to enable information disclosure via local access...

4.7CVSS3.5AI score0.00171EPSS
SaveExploits0References4
Veracode
Veracode
added 2022/07/15 1:44 a.m.35 views

Information Disclosure

xen is vulnerable to Information Disclosure. The vulnerability exists due to an aliases in the branch predictor causing some AMD processors to predict the wrong branch type...

6.5CVSS6.5AI score0.00785EPSS
SaveExploits0References18Affected Software3
CNVD
CNVD
added 2022/07/15 12:0 a.m.59 views

Siemens SIMATIC CP SRCS VPN Feature Command Injection Vulnerability

The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other protocols with data encryption.The SIMATIC CP 1243-8 I...

9.8CVSS4AI score0.02018EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/07/15 12:0 a.m.70 views

Siemens SIMATIC CP SRCS VPN Feature Code Injection Vulnerability

The SIMATIC CP 1242-7 and CP 1243-7 LTE communication processors connect SIMATIC S7-1200 controllers to a wide area network WAN. They provide integrated security features such as firewalls, virtual private networks VPNs, and support for other protocols with data encryption.The SIMATIC CP 1243-8 I...

9.8CVSS4.1AI score0.0221EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:0 a.m.10 views

The vulnerability of microprogramming software for Intel and AMD processors allows attackers to extract sensitive information from the kernel’s memory or launch attacks on host systems from virtual machines.

The vulnerability of microprogramming software for Intel and AMD processors lies in errors during the processing of the “ret” instruction, which retrieves an address for transitioning from the stack. Exploiting this vulnerability can allow attackers to extract protected information from the...

6.5CVSS6.8AI score0.03764EPSS
SaveExploits0References43Affected Software13
BDU FSTEC
BDU FSTEC
added 2022/07/15 12:0 a.m.8 views

The vulnerability of microprogramming software for Intel and AMD processors allows attackers to extract sensitive information from the kernel’s memory or launch attacks on host systems from virtual machines.

The vulnerability of microprogramming software for Intel and AMD processors lies in errors during the processing of the “ret” instruction, which extracts an address to move from the stack. Exploiting this vulnerability can allow attackers to extract protected information from the kernel’s memory ...

5.6CVSS6.8AI score0.04831EPSS
SaveExploits0References49Affected Software12
OSV
OSV
added 2022/07/14 8:15 p.m.2 views

ALPINE-CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure...

6.5CVSS6.6AI score0.00785EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/14 8:15 p.m.0 views

DEBIAN-CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure...

6.5CVSS6.4AI score0.00785EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/14 8:15 p.m.26 views

Information disclosure

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure...

2.1CVSS5.7AI score0.00785EPSS
SaveExploits0References9Affected Software3
Cvelist
Cvelist
added 2022/07/14 7:27 p.m.31 views

CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure...

7AI score0.00785EPSS
SaveExploits0References9
CVE
CVE
added 2022/07/14 7:27 p.m.398 views

CVE-2022-23825

CVE-2022-23825 affects AMD processors where branch-predictor aliases can cause misclassification of branches, potentially exposing information. The connected advisories show Linux kernel mitigations are being released for Amazon Linux 2/ALAS kernels (e.g., ALAS2KERNEL-5.10-2025-086 and ALAS2KERNE...

6.5CVSS6.8AI score0.00785EPSS
SaveExploits0References9Affected Software2
Debian CVE
Debian CVE
added 2022/07/14 7:27 p.m.44 views

CVE-2022-23825

Aliases in the branch predictor may cause some AMD processors to predict the wrong branch type potentially leading to information disclosure...

6.5CVSS2.6AI score0.00785EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/07/14 12:0 a.m.53 views

EulerOS Virtualization 2.10.1 : kernel (EulerOS-SA-2022-2110)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In aiopollcompletework of aio.c, there is a possible memory corruption due to a use after free. This could lead to local escalati...

7.8CVSS6.9AI score0.01581EPSS
SaveExploits7References19
Rows per page
Query Builder