CVE-2024-36336

Integer overflow within the AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to a loss of confidentiality, integrity, or availability...

CVE-2024-36328

CVE-2024-36328: Integer overflow in the AMD NPU Driver allows a local attacker to write out of bounds, potentially impacting integrity or availability. Affected component: AMD NPU Driver. Root cause: integer overflow leading to out-of-bounds write. Impact: local risk with possible loss of integri...

CVE-2024-36337

Integer overflow within AMD NPU Driver could allow a local attacker to write out of bounds, potentially leading to loss of confidentiality, integrity or availability...

CVE-2024-9159 Incorrect Authorization in gaizhenbiao/chuanhuchatgpt

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not proper...

CVE-2024-9159

CVE-2024-9159 affects gaizhenbiao/chuanhuchatgpt (git commit c91dbfc). The reboot/server restart function is not protected by an admin check, enabling an attacker to trigger a server restart and cause availability loss. Underlying root cause: improper authorization check around the restart operat...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2024-54085

AMI’s SPx contains a vulnerability in the BMC where an Attacker may bypass authentication remotely through the Redfish Host Interface. A successful exploitation of this vulnerability may lead to a loss of confidentiality, integrity, and/or availability...

CVE-2025-0327

CWE-269: Improper Privilege Management vulnerability exists for two services of which one managing audit trail data and the other acting as server managing client request that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when an attacker with standa...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

CVE-2023-31331

CVE-2023-31331 describes improper access control in the DRTM firmware of AMD client/embedded processors. A local, privileged attacker could perform multiple driver initializations, causing stack memory corruption with potential loss of integrity or availability. CVSSv3.1 base score is 3.0 (LOW) w...

CVE-2023-20515

CVE-2023-20515 affects the fTPM driver in the AMD trusted OS. Root cause: improper access control allowing a privileged local attacker to corrupt system memory, potentially impacting integrity, confidentiality, and availability. Affected component: fTPM driver within AMD trusted OS. Impact: memor...

CVE-2023-20515

Improper access control in the fTPM driver in the trusted OS could allow a privileged attacker to corrupt system memory, potentially leading to loss of integrity, confidentiality, or availability...

AMD Graphics Driver February 2025 Security Update

AMD has informed HP of potential vulnerabilities identified in some AMD Graphics Drivers, which might allow denial of service, loss of confidentiality, loss of integrity, or loss of availability. AMD is releasing AMD Graphics Driver for Windows to mitigate these vulnerabilities. AMD has released...

CVE-2019-19915

The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users with subscriber or greater access to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=epsredirectsave and /admin-ajax.php?action=epsredirectdelete actions. This coul...

CVE-2024-30253

@solana/web3.js is the Solana JavaScript SDK. Using particular inputs with @solana/web3.js will result in memory exhaustion OOM. If you have a server, client, mobile, or desktop product that accepts untrusted input for use with @solana/web3.js, your application/service may crash, resulting in a...

Huawei EulerOS: Security Advisory for edk2-ovmf (EulerOS-SA-2025-1117)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2025-1103)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for edk2 (EulerOS-SA-2025-1087)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: net/sched: Fix UAF when resolving a clash

A use-after-free vulnerability was found in the net/sshd tcfctflowtableprocessconn of the Linux kernel. This flaw allows an attacker with a crafted payload to induce a system crash, resulting in a loss of system availability...

CVE-2024-53899

A flaw was found in the virtualenv Python package. Due to the improper handling of quotes in magic template strings, the virtual environment activation script is vulnerable to OS command injection,leading to the loss of confidentiality,integrity and availability of the system. Mitigation Mitigati...