Lucene search
K

9 matches found

OSV
OSV
added 2023/11/08 11:15 p.m.3 views

CVE-2023-43572

A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information...

4.4CVSS5.9AI score0.00036EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/11/08 12:0 a.m.1 views

Lenovo Desktops Security Breach

Lenovo Desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktop that originates from a buffer overflow in the BiosExtensionLoader module...

6.7CVSS7.3AI score0.00037EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/08 12:0 a.m.3 views

Lenovo Desktops Buffer Error Vulnerability

Lenovo Desktops are desktop computers from the Chinese company Lenovo. A security vulnerability exists in Lenovo Desktop that originates from a buffer over-read in the BiosExtensionLoader module...

4.4CVSS7AI score0.00036EPSS
Exploits0References3
CNNVD
CNNVD
added 2021/06/08 12:0 a.m.2 views

CSME 缓冲区错误漏洞

CSME is known as Intel Management Engine BIOS Extension A buffer error vulnerability exists in IntelR CSME that stems from improper buffer limitations in the subsystem, which could allow an attacker to escalate privileges via local access. The following products and versions are affected: 11.8.86...

6.7CVSS7.3AI score0.00259EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2019/03/27 12:0 a.m.1 views

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine and Intel Server Platform Services, related to authentication process flaws (logical errors), allows attackers to bypass the MEBx authentication process.

The vulnerability of the Microprogrammable Software-based Intel Converged Security and Manageability Engine CSME and Intel Server Platform Services SPS is related to deficiencies in the authentication process logical error. Exploiting this vulnerability could allow a perpetrator to bypass the MEB...

6.9CVSS6.8AI score0.00068EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2019/03/14 8:29 p.m.2 views

CVE-2018-12192

Logic bug in Kernel subsystem in Intel CSME before version 11.8.60, 11.11.60, 11.22.60 or 12.0.20, or IntelR Server Platform Services before version SPSE504.00.04.393.0 may allow an unauthenticated user to potentially bypass MEBx authentication via physical access...

6.8CVSS5.8AI score0.00068EPSS
Exploits0References3
CNVD
CNVD
added 2018/01/15 12:0 a.m.1 views

Intel AMT has a high-risk security vulnerability

Intel AMT, known as INTEL Active Management Technology Intel Active Management Technology, is essentially an embedded system integrated into the chipset, independent of a specific operating system. The technology allows administrators to remotely manage and repair networked computer systems, and...

7AI score
Exploits0References1
ThreatPost
ThreatPost
added 2018/01/12 3:24 p.m.12 views

Intel AMT Loophole Allows Hackers to Gain Control of Some PCs in Under a Minute

Researchers have found a loophole in Intel processors that allow an attacker to bypass logins and place backdoors on laptops, allowing adversaries remote access to laptops. Researchers at F-Secure, that first identified the attack strategy, say the loophole can be exploited in less than one minut...

0.8AI score
Exploits0References6
RedHat Linux
RedHat Linux
added 2016/06/13 5:33 p.m.1 views

qemu: incorrect banked access bounds checking in vga module

An out-of-bounds read/write access flaw was found in the way QEMU's VGA emulation with VESA BIOS Extensions VBE support performed read/write operations using I/O port methods. A privileged guest user could use this flaw to execute arbitrary code on the host with the privileges of the host's QEMU...

8.8CVSS7.7AI score0.00171EPSS
Exploits0References4
Rows per page
Query Builder