Lucene search
+L

70 matches found

Kitploit
Kitploit
•added 2026/09/20 1:46 a.m.•15 views

virt-firmware

ovmf / armvirt ファームウェアボリューム向けツール これは edk2 ファームウェアイメージ向けの小さなツール集です。ファームウェアボリュームの内容をデコードして表示する機能を提供します。 変数ストア OVMFVARS.fd は変更可能で、例えばセキュアブート証明書を登録するために使用できます。 virt-fw-dump ファームウェアボリュームの内容をデコードして表示します。 使い方: virt-fw-dump -i 。 詳細は virt-fw-dump --help を試してください。出力をフィルタリングするオプションがいくつかあります。 virt-fw-vars...

6AI score
SaveExploits0
NVD
NVD
•added 2026/09/03 1:04 p.m.•14 views

CVE-2021-43613

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

6.5CVSS0.00089EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/03 2:05 a.m.•44 views

CVE-2021-43613 SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

6.5CVSS0.00089EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/03 2:05 a.m.•14 views

EUVD-2021-34868

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

6.5CVSS5.9AI score0.00089EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/03 2:05 a.m.•16 views

CVE-2021-43613 SysPasswordDxe: Password hashes are exposed in runtime UEFI variables, leading to escalation of privilege

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

6.5CVSS5.2AI score0.00089EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/03 2:05 a.m.•21 views

CVE-2021-43613

A vulnerability in the SysPasswordDxe driver of Insyde InsydeH2O 5.x exposes user and administrator password hashes in runtime UEFI variables, enabling privilege escalation . The affected firmware is also used in Siemens SIMATIC industrial products. The CVSS 3.1 score is 6.5 (Medium) with a local...

6.5CVSS5.2AI score0.00089EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/03 12:00 a.m.•1 views

CVE-2021-43613: Incorrect Permission Assignment for Critical Resource

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

6.5CVSS5.8AI score0.00089EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/03 12:00 a.m.•15 views

PT-2026-84909

An issue was discovered in SysPasswordDxe in Insyde InsydeH2O. User and administrator password hashes are exposed in runtime UEFI variables, leading to escalation of privilege...

6.5CVSS5.9AI score0.00089EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/19 6:03 a.m.•14 views

EUVD-2026-62294

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...

6.9CVSS5.4AI score0.0014EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/19 6:03 a.m.•27 views

CVE-2026-8810

On ARM platforms, an architecture-design flaw in HDD Password handling allows an attacker to retrieve the password from UEFI variables. CVSS 6.9 MEDIUM; physical access, high complexity, low privileges required. Exploitation details not provided in the documents.

6.9CVSS5.4AI score0.0014EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/19 6:03 a.m.•40 views

CVE-2026-8810 HDD Password leakage vulnerability

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...

6.9CVSS0.0014EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/19 12:00 a.m.•17 views

PT-2026-78308

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...

6.9CVSS5.3AI score0.0014EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/19 12:00 a.m.•0 views

CVE-2026-8810: Insufficiently Protected Credentials

On ARM platforms, a vulnerability in the architecture design of HDD Password could allow an attacker to retrieve HDD Password from UEFI variables...

6.9CVSS5.9AI score0.0014EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/09 4:16 p.m.•23 views

CVE-2025-58151

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

9.4CVSS0.00137EPSS
SaveExploits0References3
OSV
OSV
•added 2026/07/09 4:16 p.m.•20 views

ALPINE-CVE-2025-58151

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

9.4CVSS6.2AI score0.00137EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/07/09 2:45 p.m.•54 views

CVE-2025-58151 varstored: TOCTOU issues with mapped guest memory

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

9.4CVSS0.00137EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/09 2:45 p.m.•19 views

CVE-2025-58151

varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF. Within varstored, there were insufficient compiler barriers, creating TOCTOU issues with data in the shared buffer. The...

9.4CVSS6.2AI score0.00137EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 10:40 a.m.•14 views

CVE-2022-35897

An stack buffer overflow vulnerability leads to arbitrary code execution issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. If the attacker modifies specific UEFI variables, it can cause a stack overflow, leading to arbitrary code execution. The specific variables are normally...

6.8CVSS8.5AI score0.00381EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 9:32 a.m.•20 views

CVE-2024-39707

Insyde IHISI function 0x49 can restore factory defaults for certain UEFI variables without further authentication by default, which could lead to a possible roll-back attack in certain platforms. This is fixed in: kernel 5.2, version 05.29.19; kernel 5.3, version 05.38.19; kernel 5.4, version...

5.3CVSS6.8AI score0.00169EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•16 views

EUVD-2022-38770

Malicious code in bioql PyPI...

6.8CVSS6.7AI score0.00381EPSS
SaveExploits0References2
Rows per page
Query Builder