Lucene search
+L

2632 matches found

Cvelist
Cvelist
•added 2026/09/02 7:57 p.m.•49 views

CVE-2023-20577

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

7.4CVSS0.0016EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 7:57 p.m.•9 views

CVE-2023-20577

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

7.4CVSS7.9AI score0.0016EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 7:57 p.m.•19 views

EUVD-2023-60617

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

7.4CVSS7.3AI score0.0016EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/02 7:42 p.m.•67 views

CVE-2023-20576

CVE-2023-20576 is a HIGH severity (CVSS 3.1: 7.7) vulnerability in AMD processor firmware caused by insufficient verification of data authenticity in AGESA (AMD Generic Encapsulated Software Architecture). A local unauthenticated attacker can update SPI ROM data , potentially leading to denial of...

7.7CVSS7.2AI score0.00125EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/02 7:42 p.m.•51 views

CVE-2023-20576

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...

7.7CVSS0.00125EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/02 7:42 p.m.•14 views

CVE-2023-20576

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...

7.7CVSS7.2AI score0.00125EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/02 7:42 p.m.•14 views

EUVD-2023-60616

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...

7.7CVSS7.1AI score0.00125EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•12 views

CVE-2023-20577: Stack-based Buffer Overflow

A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resulting in arbitrary code execution...

7.4CVSS7.9AI score0.0016EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/02 12:00 a.m.•10 views

CVE-2023-20576: Insufficient Verification of Data Authenticity

Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of service or privilege escalation...

7.7CVSS7.2AI score0.00125EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/08/31 1:30 p.m.•15 views

SUSE CVE-2026-72133

In the Linux kernel, the following vulnerability has been resolved: spi: uniphier: Fix completion initialization order before devmrequestirq The driver calls devmrequestirq before initializing the completion used by the interrupt handler. Because the interrupt may occur immediately after...

8.4CVSS6.8AI score0.00182EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/31 1:30 p.m.•14 views

SUSE CVE-2026-72152

In the Linux kernel, the following vulnerability has been resolved: tpm: tpmtisspi: Use waitwoken in waitfortmpstat waiteventinterruptibletimeout evaluates its condition after setting the current task state to TASKINTERRUPTIBLE. With CONFIGDEBUGATOMICSLEEP this triggers a warning when the IRQ wai...

5.9AI score0.00216EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/31 1:29 p.m.•9 views

SUSE CVE-2026-72153

In the Linux kernel, the following vulnerability has been resolved: irqchip/crossbar: Use correct index in crossbardomainfree crossbardomainfree resets the domain data and then uses the nulled out irqdata-hwirq member as index to reset the irqmap entry and to write the relevant crossbar register...

6AI score0.0022EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/31 1:29 p.m.•11 views

SUSE CVE-2026-72155

In the Linux kernel, the following vulnerability has been resolved: mtd: spi-nor: swp: Improve locking user experience In the case of the first block being locked or the few first blocks, if the user want to fully unlock the device it has two possibilities: - either it asks to unlock the entire...

5.9AI score0.00216EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/08/31 1:29 p.m.•13 views

SUSE CVE-2026-72156

In the Linux kernel, the following vulnerability has been resolved: fpga: microchip-spi: fix zero headersize OOB read in mpfopsparseheader mpfopsparseheader reads headersize from the bitstream at MPFHEADERSIZEOFFSET 24. When headersize is zero, the expression buf + headersize - 1 reads one byte...

6.1AI score0.00215EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/31 10:04 a.m.•16 views

CVE-2026-80712

A flaw was found in the Linux kernel's spi-qpic-snand driver. This vulnerability arises from an incorrect timing issue where the SETFEATURE command for SPI-NAND flash devices is executed before the intended feature value is properly written. Consequently, the device is programmed with an outdated...

8.4CVSS5.8AI score0.00194EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/08/31 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-80712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - spi: spi-qpic-snand: write the feature value before executing SETFEATURE qcomspisendcmdaddr programs NANDFLASHCMD/NANDEXECCMD and submits the descriptors, which...

8.4CVSS6AI score0.00194EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2026/08/28 6:37 p.m.•2 views

com.powsybl:powsybl-action-dsl (4.10.2), com.powsybl:powsybl-action-dsl-spi (4.10.2) +31 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.10.2)

com.powsybl:powsybl-computation-local MAVEN version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 4.10.2 - com.powsybl:powsybl-action-dsl-spi 4.10.2 -...

7.1CVSS5.8AI score0.00604EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/28 6:37 p.m.•2 views

com.powsybl:powsybl-action-dsl (5.1.0), com.powsybl:powsybl-action-dsl-spi (5.1.0) +53 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (5.1.0)

com.powsybl:powsybl-computation-local MAVEN version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 5.1.0 - com.powsybl:powsybl-action-dsl-spi 5.1.0 -...

7.1CVSS5.8AI score0.00604EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/28 6:37 p.m.•2 views

com.powsybl:powsybl-action-dsl (4.8.0-rc2), com.powsybl:powsybl-action-dsl-spi (4.8.0-rc2) +30 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (4.8.0-rc2)

com.powsybl:powsybl-computation-local MAVEN version 4.8.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 4.8.0-rc2 - com.powsybl:powsybl-action-dsl-spi...

7.1CVSS5.8AI score0.00604EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2026/08/28 6:37 p.m.•2 views

com.powsybl:powsybl-action-dsl (6.1.1), com.powsybl:powsybl-action-dsl-spi (6.1.1) +64 more potentially affected by CVE-2026-55673 via com.powsybl:powsybl-computation-local (6.1.1)

com.powsybl:powsybl-computation-local MAVEN version 6.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.powsybl:powsybl-computation-local and may be impacted: - com.powsybl:powsybl-action-dsl 6.1.1 - com.powsybl:powsybl-action-dsl-spi 6.1.1 -...

7.1CVSS5.8AI score0.00604EPSS
SaveExploits0
Rows per page
Query Builder