Lucene search
+L

4612 matches found

RedhatCVE
RedhatCVE
•added 2025/02/06 3:15 a.m.•23 views

CVE-2021-35113

Possible authentication bypass due to improper order of signature verification and hashing in the signature verification call in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

7.3CVSS7.4AI score0.00147EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 9:05 p.m.•24 views

CVE-2022-20929

A vulnerability in the upgrade signature verification of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an unauthenticated, local attacker to provide an unauthentic upgrade file for upload. This vulnerability is due to insufficient cryptographic signature verification of upgrade...

7.8CVSS6.5AI score0.00188EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/05 2:11 p.m.•23 views

CVE-2020-11093

Hyperledger Indy Node is the server portion of a distributed ledger purpose-built for decentralized identity. In Hyperledger Indy before version 1.12.4, there is lack of signature verification on a specific transaction which enables an attacker to make certain unauthorized alterations to the...

7.5CVSS6.7AI score0.01183EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/02/05 12:30 p.m.•27 views

CVE-2024-43405

Nuclei is a vulnerability scanner powered by YAML based templates. Starting in version 3.0.0 and prior to version 3.3.2, a vulnerability in Nuclei's template signature verification system could allow an attacker to bypass the signature check and possibly execute malicious code via custom code...

7.8CVSS7.4AI score0.01109EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2025/02/05 3:50 a.m.•13 views

SUSE CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS7.4AI score0.00533EPSS
SaveExploits0References3
NVD
NVD
•added 2025/02/04 8:15 a.m.•20 views

CVE-2024-10237

There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process...

7.2CVSS0.00249EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/02/04 7:59 a.m.•14 views

CVE-2024-10237 SMC BMC Firmware Image Authentication Design Issue

There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process...

7.2CVSS7.1AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/04 7:59 a.m.•72 views

CVE-2024-10237

CVE-2024-10237 concerns a logical flaw in the BMC firmware image authentication design for Supermicro MBD-X12DPG-OA6. The vulnerability can allow an attacker to modify firmware to bypass BMC inspection and bypass the signature verification process, potentially enabling reflashing of the BMC SPI w...

7.2CVSS7.1AI score0.00249EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/02/04 7:59 a.m.•34 views

CVE-2024-10237 SMC BMC Firmware Image Authentication Design Issue

There is a vulnerability in the BMC firmware image authentication design at Supermicro MBD-X12DPG-OA6 . An attacker can modify the firmware to bypass BMC inspection and bypass the signature verification process...

7.2CVSS0.00249EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/02/04 7:51 a.m.•27 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP. Mitigation Mitigation requires to...

7.2CVSS7AI score0.00533EPSS
SaveExploits0References4
NVD
NVD
•added 2025/02/03 6:15 p.m.•28 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS0.00533EPSS
SaveExploits0References5
osv_cve
osv_cve
•added 2025/02/03 6:15 p.m.•25 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

6.9AI score
SaveExploits0References5
osv_debian
osv_debian
•added 2025/02/03 6:15 p.m.•8 views

DEBIAN-CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS7.7AI score0.00533EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2025/02/03 5:24 p.m.•41 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS7.7AI score0.00533EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/02/03 5:24 p.m.•17 views

CVE-2024-56161

Improper signature verification in AMD CPU ROM microcode patch loader may allow an attacker with local administrator privilege to load malicious CPU microcode resulting in loss of confidentiality and integrity of a confidential guest running under AMD SEV-SNP...

7.2CVSS6.9AI score0.00533EPSS
SaveExploits0References1
CVE
CVE
•added 2025/02/03 5:24 p.m.•135 views

CVE-2024-56161

CVE-2024-56161 concerns AMD SEV-SNP: Improper signature verification in the AMD CPU ROM microcode patch loader may permit a local administrator to load tampered microcode, compromising confidentiality and integrity of a confidential guest. Affected component: AMD microcode patch loader; root caus...

7.2CVSS7AI score0.00533EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2025/02/03 12:00 a.m.•23 views

AMD SEV-SNP 安全漏洞

AMD SEV-SNP is a secure encrypted virtualization firmware from UltraMicroelectronics AMD. A single key is used to encrypt system memory. A security vulnerability exists in AMD SEV-SNP that stems from incorrect signature verification...

7.2CVSS7.3AI score0.00533EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/01/27 12:00 a.m.•24 views

Samsung Smart Switch Data Transfer Service Data Compromise

The vulnerability of the Samsung Smart Switch data transfer service for the Android operating system is related to errors in verifying the cryptographic signature. Exploiting this vulnerability allows a malicious actor to influence the confidentiality, integrity, and accessibility of the protecte...

7.1CVSS7.5AI score0.00238EPSS
SaveExploits0References2Affected Software1
SUSE CVE
SUSE CVE
•added 2025/01/20 3:47 a.m.•10 views

SUSE CVE-2025-21644

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC fails to load, the driver wedges, but in the process it tries to do stuff that may not be initialized yet. This moves the xegttlbinvalidationinit to be done earlier: as its own doc...

5.5CVSS7.4AI score0.00216EPSS
SaveExploits0References3
NVD
NVD
•added 2025/01/19 11:15 a.m.•28 views

CVE-2025-21644

In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix tlb invalidation when wedging If GuC fails to load, the driver wedges, but in the process it tries to do stuff that may not be initialized yet. This moves the xegttlbinvalidationinit to be done earlier: as its own doc...

5.5CVSS0.00216EPSS
SaveExploits0References2
Rows per page
Query Builder