Lucene search
+L

5675 matches found

Positive Technologies
Positive Technologies
added 2022/11/10 12:0 a.m.2 views

PT-2022-14918 · Intel · Intel Processors

Name of the Vulnerable Software and Affected Versions: IntelR Processors affected versions not specified Description: A time-of-check time-of-use race condition in the BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local...

7.9CVSS7.2AI score0.00131EPSS
SaveExploits0References4
Hewlett-Packard
Hewlett-Packard
added 2022/11/10 12:0 a.m.43 views

HP PC BIOS November 2022 Security Update for Potential Stack Buffer Overflow

A potential vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerability. HP has identified affected platforms and corresponding SoftPaqs with...

8.4CVSS1.7AI score0.00234EPSS
SaveExploits0Affected Software87
Tenable Nessus
Tenable Nessus
added 2022/11/10 12:0 a.m.30 views

Dell Client BIOS Improper Input Validation (DSA-2022-249)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by an improper input validation vulnerability. A local, authenticated attacker can exploit this vulnerability by using an SMI to execute arbitrary code in the SMRAM. Please see the included Dell Security...

7.8CVSS7.6AI score0.00175EPSS
SaveExploits0References2
Hewlett-Packard
Hewlett-Packard
added 2022/11/09 12:0 a.m.43 views

Intel 2022.3 IPU - BIOS November 2022 Security Update

Intel has informed HP of potential security vulnerabilities in the BIOS firmware for some Intel® Processors which may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Intel has released updates to mitigate the potential vulnerabilitie...

8.2CVSS2.1AI score0.00193EPSS
SaveExploits0Affected Software560
Lenovo
Lenovo
added 2022/11/08 9:31 p.m.10 views

Multi-Vendor BIOS Security Vulnerabilities (November 2022) - Lenovo Support US

No description provided...

8.5AI score
SaveExploits0
Hewlett-Packard
Hewlett-Packard
added 2022/11/08 12:0 a.m.36 views

HP PC BIOS November 2022 Security Updates for Potential TOCTOU Vulnerabilities

Potential time-of-check to time-of-use TOCTOU vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential...

7.8CVSS1.1AI score0.00138EPSS
SaveExploits0Affected Software404
Positive Technologies
Positive Technologies
added 2022/11/08 12:0 a.m.10 views

PT-2022-5394 · Intel · Intel Nuc

Name of the Vulnerable Software and Affected Versions: IntelR NUCs versions prior to INWHL357.0046 Description: The issue is related to improper access control in BIOS firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. It is also associated...

8.2CVSS6.9AI score0.00193EPSS
SaveExploits0References6
Intel
Intel
added 2022/11/08 12:0 a.m.121 views

2022.3 IPU – BIOS Advisory

Summary: Potential security vulnerabilities in the BIOS firmware for some Intel® Processors may allow escalation of privilege. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-26006 Description: Improper input validation in th...

8.2CVSS7.4AI score0.00193EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
added 2022/11/08 12:0 a.m.4 views

HPESBHF04380 rev.3 - Certain HPE ProLiant BL/DL/ML Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server - Prior to 1.6410-20-2022 HPE ProLiant MicroServer Gen10 Plus v2 - Prior to 1.6410-20-2022 HPE ProLiant ML30 Gen10 Plus server - Prior to...

8.2CVSS6.1AI score0.00193EPSS
SaveExploits0
HPE Security Bulletins
HPE Security Bulletins
added 2022/11/08 12:0 a.m.4 views

HPESBHF04374 rev.2 - Certain HPE Apollo Servers Using Certain Intel Processor BIOS, INTEL-SA-00688, 2022.3 IPU – BIOS Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant XL170r Gen9 Server - Prior to v3.0408-04-2022 HPE ProLiant XL190r Gen9 Server - Prior to v3.0408-04-2022 HPE ProLiant XL230a Gen9 Server - Prior to v3.0408-04-202...

8.2CVSS6.1AI score0.00193EPSS
SaveExploits0
Amd
Amd
added 2022/11/08 12:0 a.m.102 views

AMD Graphics Driver Vulnerabilities – November 2022

Bulletin ID: AMD-SB-1029 Potential Impact: Varies by CVE, see descriptions below Severity: Varies by CVE, see descriptions below Summary AMD received reports of vulnerabilities potentially affecting some AMD Graphics products. Refer to the CVE Details section for information about each CVE. CVE...

7.8CVSS7.7AI score0.0026EPSS
SaveExploits0
Lenovo
Lenovo
added 2022/10/31 4:1 p.m.5 views

Lenovo Notebook BIOS Vulnerabilities - Lenovo Support US

No description provided...

7.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.9 views

PT-2022-6356 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to an improper input validation vulnerability in prior Dell BIOS versions. A local authenticated malicious user may potentially exploit this vulnerability by using an...

7.8CVSS7.7AI score0.002EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/10/27 12:0 a.m.6 views

PT-2022-6350 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to a stack-based buffer overflow in Dell BIOS. A local authenticated malicious user may exploit this by sending larger than expected input to a parameter using an SMI...

7.5CVSS7.7AI score0.00168EPSS
SaveExploits0References7
Hewlett-Packard
Hewlett-Packard
added 2022/10/19 12:0 a.m.36 views

HP PC BIOS October 2022 PCR Measurement Update

A potential security vulnerability has been identified in the system BIOS for certain HP PC products which may allow loss of integrity. HP is releasing firmware updates to mitigate the potential vulnerability. Intel has released updates to mitigate the potential vulnerabilities. HP has identified...

5.5CVSS1.5AI score0.00182EPSS
SaveExploits0Affected Software98
Intel
Intel
added 2022/10/19 12:0 a.m.80 views

3rd Generation Intel® Xeon® Scalable Processors Advisory

Summary: A potential security vulnerability in some 3rd Generation Intel® Xeon® Scalable Processors may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-33117 Description: Improper access control for...

5.5CVSS5.5AI score0.00306EPSS
SaveExploits0
CNVD
CNVD
added 2022/10/14 12:0 a.m.42 views

Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08763)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell USA.Dell BIOS is vulnerable to an input validation error, which can be exploited by a locally authenticated attacker with administrative privileges to modify UEFI variables...

5.6CVSS3.7AI score0.00167EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/14 12:0 a.m.43 views

Dell BIOS Input Validation Error Vulnerability (CNVD-2023-08762)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. An input validation error vulnerability exists in Dell BIOS, which could be exploited by a locally authenticated attacker to obtain arbitrary code execution in SMRAM using SMI...

7.8CVSS3AI score0.00213EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/14 12:0 a.m.30 views

Dell BIOS Buffer Overflow Vulnerability (CNVD-2023-08761)

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, U.S.A. A buffer overflow vulnerability exists in Dell BIOS, which can be exploited by a local, authenticated attacker to obtain arbitrary code execution in SMRAM using SMI...

7.8CVSS3.7AI score0.00192EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/10/14 12:0 a.m.53 views

Dell BIOS Buffer Overflow Vulnerability (CNVD-2023-08760)

Dell BIOS is embedded software on a small memory chip on the motherboard of a computer from Dell, U.S.A. A buffer overflow vulnerability exists in Dell BIOS, which can be exploited by a locally authenticated attacker to cause arbitrary writes during SMM by manipulating the SMI...

7.8CVSS3.4AI score0.0016EPSS
SaveExploits0References1
Rows per page
Query Builder