2635 matches found
CVE-2023-20579
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 kernel mode privileged access to bypass protections potentially resulting in loss of integrity and availability...
CVE-2023-20587
Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...
Input validation
Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...
Design/Logic Flaw
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 kernel mode privileged access to bypass protections potentially resulting in loss of integrity and availability...
CVE-2023-20579
CVE-2023-20579 involves improper access control in the AMD SPI protection feature. A local Ring0 (kernel mode) user could bypass protections, potentially affecting integrity and availability. Connected documents confirm this is an AMD SPI protection flaw and cite multiple advisories (NVD, Red Hat...
CVE-2023-20579
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 kernel mode privileged access to bypass protections potentially resulting in loss of integrity and availability...
CVE-2023-20587
Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...
CVE-2023-20587
A vulnerability exists in AMD hardware due to improper access control in the System Management Mode (SMM) . This flaw may allow a local unauthenticated attacker to gain access to the SPI flash , which could potentially lead to arbitrary code execution . While specific affected versions are not de...
CVE-2023-20587
Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...
CVE-2023-20579: Improper Access Control
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 kernel mode privileged access to bypass protections potentially resulting in loss of integrity and availability...
CVE-2023-20587: Improper Access Control
Improper Access Control in System Management Mode SMM may allow an attacker access to the SPI flash potentially leading to arbitrary code execution...
PT-2024-11953
Name of the Vulnerable Software and Affected Versions AGESA™ affected versions not specified Description Insufficient verification of data authenticity may allow an attacker to update SPI ROM data, which could lead to privilege escalation or a denial of service. SPI ROM is a non-volatile memory...
com.nimbusds:oauth2-oidc-sdk (>=2.1, <=2.8), com.nimbusds:oidc-userinfo-ldap (1.0) +1 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (2.16)
com.nimbusds:nimbus-jose-jwt MAVEN version 2.16 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk =2.1, =2.8 - com.nimbusds:oidc-userinfo-ldap 1.0 -...
com.nimbusds:oauth2-oidc-sdk (2.9), com.nimbusds:oidc-userinfo-ldap (1.1) +1 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (2.18.1)
com.nimbusds:nimbus-jose-jwt MAVEN version 2.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk 2.9 - com.nimbusds:oidc-userinfo-ldap 1.1 - com.nimbusds:oidc-userinfo-sp...
com.nimbusds:oauth2-oidc-sdk (3.0.1), com.nimbusds:oidc-claims-source-ldap (1.2.3) +1 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (2.24)
com.nimbusds:nimbus-jose-jwt MAVEN version 2.24 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk 3.0.1 - com.nimbusds:oidc-claims-source-ldap 1.2.3 -...
com.nimbusds:oauth2-oidc-sdk (>=3.0.2, <=3.2), com.nimbusds:oidc-claims-source-ldap (>=1.2.4, <=1.2.5) +3 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (2.25)
com.nimbusds:nimbus-jose-jwt MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.nimbusds:oauth2-oidc-sdk =3.0.2, =1.2.4, =1.2.4, =1.4-release, =1.4-release, =1.5.4-release Source...
com.bluefirereader:sso-user (>=1.0.0, <=1.2.13), com.intropro:b-test (>=1.0.2, <=1.0.10) +3 more potentially affected by CVE-2023-52428 via com.nimbusds:nimbus-jose-jwt (2.26)
com.nimbusds:nimbus-jose-jwt MAVEN version 2.26 is affected by a known vulnerability. The following packages have a transitive dependency on com.nimbusds:nimbus-jose-jwt and may be impacted: - com.bluefirereader:sso-user =1.0.0, =1.0.2, =1.0.10 - com.nimbusds:oauth2-oidc-sdk 3.3 -...
OESA-2024-1114 kernel security update
The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel before 6.5.9, there is a NULL pointer dereference in sendacknowledge in net/nfc/nci/spi.c.CVE-2023-46343 In the Linux kernel before 6.4.12, amdgpucswaitallfences in drivers/gpu/drm/amd/amdgpu/amdgpucs.c has a...
