Lucene search
+L

2280 matches found

OSV
OSV
added 2024/03/13 4:15 p.m.9 views

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

8.4CVSS6.1AI score0.00204EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/13 4:04 p.m.27 views

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM...

7.2CVSS7.1AI score0.00204EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/13 4:04 p.m.59 views

CVE-2024-0161

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are affected by an improper SMM communication buffer verification vulnerability, enabling a local, low-privileged attacker to potentially perform arbitrary writes to SMRAM. The issue stems from a faulty SMM buffer validation in the BIOS/firm...

8.4CVSS6.9AI score0.00204EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.11 views

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Security Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A security vulnerability exists...

3.8CVSS6.6AI score0.00169EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.7 views

Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 输入验证错误漏洞

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. An input validation error...

8.4CVSS7AI score0.00204EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/03/13 12:00 a.m.13 views

PT-2024-2093 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to a flaw in the verification of the SMM communication buffer, which could allow an attacker...

8.4CVSS7.3AI score0.00204EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.9 views

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Security Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A security vulnerability exists...

6.3CVSS6.8AI score0.00115EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.8 views

Dell PowerEdge Server BIOS 和 Dell Precision Rack BIOS 缓冲区错误漏洞

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A buffer overflow vulnerability...

8.8CVSS7AI score0.00151EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/13 12:00 a.m.6 views

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS Security Vulnerability

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS are both products of Dell, Inc.Dell PowerEdge Server BIOS is a system update driver from Dell.Dell Precision Rack BIOS is a Dell Precision Rack BIOS is a BIOS utility for high-performance workstation products. A security vulnerability exists...

3.8CVSS6.6AI score0.00203EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2024/03/13 12:00 a.m.23 views

Ubuntu: Security Advisory (USN-6689-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.1AI score0.01996EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/12 10:22 a.m.11 views

USN-6689-1 ruby-rack vulnerabilities

It was discovered that Rack incorrectly parse some headers. An attacker could possibly use this issue to cause a denial of service. CVE-2023-27539, CVE-2024-26141, CVE-2024-26146...

7.5CVSS6.6AI score0.01996EPSS
SaveExploits1References4
Ubuntu
Ubuntu
added 2024/03/12 10:22 a.m.76 views

USN-6689-1: Rack vulnerabilities

It was discovered that Rack incorrectly parse some headers. An attacker could possibly use this issue to cause a denial of service. CVE-2023-27539, CVE-2024-26141, CVE-2024-26146...

7.5CVSS6.5AI score0.01996EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.14 views

PT-2024-2242 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to an Improper SMM communication buffer verification vulnerability in the BIOS of Dell...

8.8CVSS6.6AI score0.00151EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.10 views

PT-2024-2090 · Dell · Dell Poweredge Server Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to an improper parameter initialization, which could be exploited by a local low privileged...

3.8CVSS6.9AI score0.00203EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/03/12 12:00 a.m.42 views

Ubuntu 23.10 : Rack vulnerabilities (USN-6689-1)

The remote Ubuntu 23.10 host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6689-1 advisory. It was discovered that Rack incorrectly parse some headers. An attacker could possibly use this issue to cause a denial of service. CVE-2023-27539,...

7.5CVSS6.6AI score0.01996EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.10 views

PT-2024-2089 · Dell · Dell Poweredge Server Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS versions affected versions not specified Dell Precision Rack BIOS versions affected versions not specified Description: The issue is related to an improper parameter initialization vulnerability in the BIOS software...

3.8CVSS6.4AI score0.00169EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2024/03/12 12:00 a.m.18 views

PT-2024-2312 · Dell · Dell Precision Rack Bios +1

Name of the Vulnerable Software and Affected Versions: Dell PowerEdge Server BIOS affected versions not specified Dell Precision Rack BIOS affected versions not specified Description: The issue is related to a Time-of-check Time-of-use TOCTOU Race Condition in the BIOS microcode of Dell PowerEdge...

6.3CVSS7AI score0.00115EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2024/03/07 12:00 a.m.53 views

Ubuntu 20.04 LTS / 22.04 LTS : Puma vulnerabilities (USN-6682-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6682-1 advisory. ZeddYu Lu discovered that Puma incorrectly handled parsing certain headers. A remote attacker could possibly use this issue to perform an HTT...

9.8CVSS7.1AI score0.04088EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2024/03/06 12:00 a.m.42 views

SUSE SLES15: ruby2.5-rubygem-rack / ruby2.5-rubygem-rack-doc / etc (SUSE-SU-2024:0765-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:0765-1 advisory. - CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing bsc1220239. - CVE-2024-26141: Fixed a...

7.5CVSS6.6AI score0.35376EPSS
SaveExploits2References10
OSV
OSV
added 2024/03/05 12:47 p.m.14 views

SUSE-SU-2024:0765-1 Security update for rubygem-rack

This update for rubygem-rack fixes the following issues: - CVE-2024-25126: Fixed a denial-of-service vulnerability in Rack Content-Type parsing bsc1220239. - CVE-2024-26141: Fixed a denial-of-service vulnerability in Range request header parsing bsc1220242. - CVE-2024-26146: Fixed a...

7.5CVSS7.5AI score0.35376EPSS
SaveExploits2References7
Rows per page
Query Builder