Lucene search
+L

2634 matches found

Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•2 views

PT-2022-32589

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.58 Description The issue is related to a NULL pointer dereference in the bcm2835 spi handle err function for non-DMA transfers. This problem was introduced in version v5.4 and is fixed in Linux Kernel versi...

5.4AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•2 views

PT-2022-32363

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.15 Description The issue is related to a NULL pointer dereference in the bcm2835 spi handle err function for non-DMA transfers. This problem was introduced in version v5.4 and is fixed in Linux Kernel versi...

5.6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/07/31 12:00 a.m.•3 views

PT-2022-32777

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.134 Description The issue is related to a NULL pointer dereference in the bcm2835 spi handle err function for non-DMA transfers. This problem was introduced in version v5.4 and is fixed in Linux Kernel...

5.4AI score
SaveExploits0References1
NVD
NVD
•added 2022/07/01 12:15 a.m.•31 views

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

9.8CVSS0.01314EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/07/01 12:15 a.m.•12 views

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

9.8CVSS5.4AI score0.01314EPSS
SaveExploits0References4
Prion
Prion
•added 2022/07/01 12:15 a.m.•29 views

Design/Logic Flaw

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

7.5CVSS9.3AI score0.01314EPSS
SaveExploits0References3Affected Software2
Cvelist
Cvelist
•added 2022/06/30 11:28 p.m.•36 views

CVE-2022-32295

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

9.6AI score0.01314EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/06/30 12:00 a.m.•8 views

CVE-2022-32295: Undefined Security Weakness

On Ampere Altra and AltraMax devices before SRP 1.09, the Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component...

9.8CVSS8.2AI score0.01314EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/30 12:00 a.m.•17 views

PT-2022-21213 · Ampere · Ampere Altra Max +1

Name of the Vulnerable Software and Affected Versions: Ampere Altra and AltraMax devices before SRP 1.09 Description: The Altra reference design of UEFI accesses allows insecure access to SPI-NOR by the OS/hypervisor component. Recommendations: For Ampere Altra and AltraMax devices before SRP 1.0...

9.8CVSS9.4AI score0.01314EPSS
SaveExploits0References7
osv_gsd
osv_gsd
•added 2022/06/28 7:32 p.m.•10 views

GSD-2022-1003615 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.121 by commi...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/06/28 7:11 p.m.•22 views

GSD-2022-1003401 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/06/28 6:45 p.m.•16 views

GSD-2022-1003109 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commit...

7.2AI score
SaveExploits0
osv_gsd
osv_gsd
•added 2022/06/28 6:15 p.m.•14 views

GSD-2022-1002757 spi: spi-fsl-qspi: check return value after calling platform_get_resource_byname()

spi: spi-fsl-qspi: check return value after calling platformgetresourcebyname This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•6 views

PT-2022-31372

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•5 views

PT-2022-31878

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue concerns the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•7 views

PT-2022-31020

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could...

5.7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/06/28 12:00 a.m.•6 views

PT-2022-31664

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue concerns the spi-fsl-qspi component in the Linux Kernel, where the return value after calling the platform get resource byname function is not properly checked. This could potential...

5.7AI score
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2022/05/24 5:24 p.m.•3 views

org.wildfly:wildfly-client-all (9.0.0.alpha1), org.wildfly:wildfly-clustering-ejb-spi (>=8.1.0.cr1, <=9.0.0.alpha1) +2 more potentially affected by CVE-2020-14297 via org.jboss:jboss-ejb-client (2.0.1.final)

org.jboss:jboss-ejb-client MAVEN version 2.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss:jboss-ejb-client and may be impacted: - org.wildfly:wildfly-client-all 9.0.0.alpha1 - org.wildfly:wildfly-clustering-ejb-spi =8.1.0.cr1,...

6.5CVSS0.01203EPSS
SaveExploits0
NVD
NVD
•added 2022/05/12 7:15 p.m.•32 views

CVE-2021-26317

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution...

7.8CVSS0.00285EPSS
SaveExploits0References1
Prion
Prion
•added 2022/05/12 7:15 p.m.•33 views

Code injection

Failure to verify the protocol in SMM may allow an attacker to control the protocol and modify SPI flash resulting in a potential arbitrary code execution...

7.2CVSS8.1AI score0.00285EPSS
SaveExploits0References1
Rows per page
Query Builder