2787 matches found
AMD Client Vulnerabilities – May 2022
Bulletin ID: AMD-SB-1027 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary During security reviews in collaboration with Google, Microsoft, and Oracle, potential vulnerabilities in the AMD Secure Processor ASP, AMD System Management Un...
Fedora: Security Advisory for ruby (FEDORA-2022-8cf0124add)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
[SECURITY] Fedora 34 Update: ruby-3.0.4-153.fc34
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[SECURITY] Fedora 35 Update: ruby-3.0.4-153.fc35
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[SECURITY] Fedora 36 Update: ruby-3.1.2-164.fc36
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
CVE-2021-26353
Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity...
CVE-2021-26352
Insufficient bound checks in System Management Unit SMU PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service...
CVE-2022-28005: Insufficiently Protected Credentials
An issue was discovered in the 3CX Phone System Management Console prior to version 18 Update 3 FINAL. An unauthenticated attacker could abuse improperly secured access to arbitrary files on the server via /Electron/download directory traversal in conjunction with a path component that uses...
CVE-2022-28806
An issue was discovered on certain Fujitsu LIEFBOOK devices A3510, U9310, U7511/U7411/U7311, U9311, E5510/E5410, U7510/U7410/U7310, E459/E449 with BIOS versions before v1.09 A3510, v2.17 U9310, v2.30 U7511/U7411/U7311, v2.33 U9311, v2.23 E5510, v2.19 U7510/U7410, v2.13 U7310, and v1.09 E459/E449...
Important: Red Hat Security Advisory: Satellite 6.10.5 Async Bug Fix Update
Updated Satellite 6.10 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...
FUJITSU LIEFBOOK devices 缓冲区错误漏洞
The FUJITSU LIEFBOOK devices are a laptop computer from Fujitsu FUJITSU Japan. A buffer error vulnerability exists in multiple versions of FUJITSU LIEFBOOK, which stems from the FJGABIFlashCoreAxtractionSMM driver registering a Software System Management Interrupt SWSMI handler that is not...
CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
DEBIAN-CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
UBUNTU-CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
CVE-2022-29264
An issue was discovered in coreboot 4.13 through 4.16. On APs, arbitrary code execution in SMM may occur...
PT-2022-19509 · Coreboot +1 · Coreboot +1
Name of the Vulnerable Software and Affected Versions: coreboot versions 4.13 through 4.16 Description: An issue in coreboot allows arbitrary code execution in SMM on APs. Recommendations: For coreboot versions 4.13 through 4.16, update to a version that fixes this issue. At the moment, there is ...
coreboot 安全漏洞
coreboot is a freeware program. It is designed to replace the proprietary BIOS firmware found in most computers. A security vulnerability exists in coreboot 4.13 through 4.16, which originates on the AP and may occur as a result of arbitrary code execution in the SMM...
CVE-2021-4211
A potential vulnerability in the SMI callback function used in the SMBIOS event log driver in some Lenovo Desktop, ThinkStation, and ThinkEdge models may allow an attacker with local access and elevated privileges to execute arbitrary code...