Lucene search
K

28 matches found

Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.2 views

PT-2026-33341

Dell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability, leading to unauthorized access...

5.1CVSS5.8AI score0.00015EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/12/13 3:58 p.m.4 views

CVE-2025-58770

APTIOV contains a vulnerability in BIOS where a user may cause “Improper Handling of Insufficient Permissions or Privileges” by local access. Successful exploitation of this vulnerability can lead to escalation of authorization and potentially impact Integrity and Availability...

8.4CVSS6.9AI score0.00016EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2025/09/14 1:32 p.m.131 views

Ring-Selector-Bios-Kernel-Smm-Exploit-

Ring-S...

7.1AI score
Exploits0
CNVD
CNVD
added 2025/08/20 12:0 a.m.2 views

Dell PowerEdge Platform 14G AMD BIOS Information Disclosure Vulnerability

Dell PowerEdge Platform 14G AMD BIOS is a BIOS system from Dell USA. The Dell PowerEdge Platform 14G AMD BIOS suffers from an information disclosure vulnerability that originates from end-of-buffer memory location access, which can be exploited by an attacker to gain access to internal system...

3.8CVSS6.5AI score0.00069EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/07/10 12:0 a.m.1 views

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper handling of the BIOS version in the lpfc driver, which could lead to a buffer overflow...

5.5CVSS7.2AI score0.00048EPSS
Exploits0References10
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.2 views

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the BIOS, where a user can cause an Integer Overflow or Wrap-around error through network means. Successful exploitation of this vulnerability may lead to a denial of service...

3.5CVSS6.8AI score0.00041EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2025/04/15 12:0 a.m.3 views

The vulnerability of the BIOS microprogramming system in Dell laptops allows a hacker to execute arbitrary code.

The vulnerability of the BIOS microprogramming system in Dell laptops is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.5CVSS8.2AI score0.00052EPSS
Exploits0References4Affected Software51
BDU FSTEC
BDU FSTEC
added 2024/05/17 12:0 a.m.2 views

The vulnerability of UEFI (BIOS) in Huawei personal computers allows a hacker to gain unauthorized access to arbitrary functions.

The vulnerability of UEFI BIOS in Huawei personal computers is related to improper control of access to the SMI handler interface. Exploiting this vulnerability can allow an attacker to gain unauthorized access to arbitrary functions...

7.8CVSS5.6AI score0.00008EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2024/05/16 12:0 a.m.2 views

Intel BIOS PPAM 安全漏洞

Intel Bios is a basic input-output system used by Intel Corporation USA to perform hardware initialization during the power-on startup phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in the Intel BIOS PPAM firmware that stems from...

6.1CVSS6.2AI score0.00057EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/05/16 12:0 a.m.2 views

Intel BIOS Guard firmware 安全漏洞

Intel Bios is a basic input-output system used by Intel Corporation USA to perform hardware initialization during the power-on boot phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in the Intel BIOS Guard firmware that stems from t...

7.2CVSS6.2AI score0.00062EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/04/15 12:0 a.m.2 views

The vulnerability of UEFI (BIOS) in HP workstations allows a hacker to elevate their privileges, execute arbitrary code, or cause system failures.

The vulnerability of HP workstation BIOS microprogramming software is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges, execute arbitrary code, or cause service failures...

7.9CVSS5.7AI score0.00162EPSS
Exploits0References3Affected Software3
BDU FSTEC
BDU FSTEC
added 2023/12/14 12:0 a.m.1 views

The vulnerability of the BIOS loading, update, backup, and recovery utility from the Phoenix WinPhlash flash device (previously known as Phoenix SecureCore Tiano WinFlash) is related to deficiencies in access control mechanisms, allowing attackers to escalate their privileges.

The vulnerability of the BIOS loading, backup, and recovery utility for the Phoenix WinPhlash flash device previously known as Phoenix SecureCore Tiano WinFlash is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to enhance their privileges...

10CVSS7.7AI score0.00593EPSS
Exploits0References6Affected Software1
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.3 views

PT-2023-20279 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: The issue is related to an out-of-bounds read in the BIOS firmware for some IntelR Processors. This may allow an authenticated user to potentially enable escalation of privilege v...

8CVSS7.6AI score0.00056EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/11/14 12:0 a.m.4 views

PT-2023-27005 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper input validation in the BIOS of AMI AptioV, which can be exploited via the local network. A successful exploit may result in a loss of confidentiality,...

7.8CVSS7.2AI score0.00066EPSS
Exploits0References2
OSV
OSV
added 2023/06/23 10:15 a.m.1 views

CVE-2023-25937

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable...

6.7CVSS5.8AI score0.00022EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/06/12 12:0 a.m.3 views

PT-2023-12910 · Hewlett Packard · Hp Bios

Name of the Vulnerable Software and Affected Versions: HP BIOS affected versions not specified Description: A potential Time-of-Check to Time-of-Use TOCTOU issue has been identified in the HP BIOS for certain HP PC products. This may allow for arbitrary code execution, denial of service, and...

7.8CVSS7.7AI score0.00174EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/05/10 12:0 a.m.1 views

Intel Bios 安全漏洞

Intel Bios is a basic input-output system from Intel Corporation USA used to perform hardware initialization during the power-on boot phase, as well as firmware that provides runtime services to the operating system. A security vulnerability exists in Intel Bios. An attacker could exploit the...

7.8CVSS7.5AI score0.00051EPSS
Exploits0References3
BDU FSTEC
BDU FSTEC
added 2023/03/30 12:0 a.m.2 views

The vulnerability of ThinkPad laptop microprogramming software exists due to a flaw in the BIOS’ mechanism for detecting unauthorized access. This flaw allows a intruder to execute arbitrary code.

The vulnerability of the BIOS microprogramming system in ThinkPad laptops exists due to a flaw in the mechanism for detecting unauthorized access to the BIOS. Exploiting this vulnerability can allow an intruder to execute arbitrary code...

5.9CVSS7AI score0.00127EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/02/01 12:0 a.m.3 views

HP PC 安全漏洞

HP PC is a computer product of Hewlett-Packard HP Company, USA. The HP PC has a security vulnerability that stems from a potential flaw in the BIOS UEFI firmware that could allow arbitrary code execution...

7.8CVSS7.8AI score0.00062EPSS
Exploits0References2
OSV
OSV
added 2023/01/11 8:15 a.m.3 views

CVE-2021-26316

Failure to validate the communication buffer and communication service in the BIOS may allow an attacker to tamper with the buffer resulting in potential SMM System Management Mode arbitrary code execution...

7.8CVSS6.2AI score0.00055EPSS
Exploits0References2
Rows per page
Query Builder