5670 matches found
Design/Logic Flaw
Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface...
CVE-2021-36285
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack...
CVE-2021-36285
CVE-2021-36285 affects Dell BIOS and allows a local authenticated administrator to bypass the NVMe password attempt limits, enabling brute-force attempts. The vulnerability stems from improper restriction of excessive authentication attempts. Exploitation is local with high privileges required; i...
CVE-2021-36284
CVE-2021-36284 affects Dell BIOS. The issue is an Improper Restriction of Excessive Authentication Attempts, allowing a local authenticated administrator to bypass brute-force mitigations and perform a brute-force-style attack. Documented impact is local access with potential password-guessing ri...
CVE-2021-36284
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack...
CVE-2021-36283
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
CVE-2021-36283
CVE-2021-36283 concerns Dell BIOS with an improper input validation vulnerability. The issue enables a local authenticated attacker to use a System Management Interrupt (SMI) to execute arbitrary code in SMRAM. Affected software is Dell BIOS; root cause is insufficient input validation within the...
CVE-2021-21522
CVE-2021-21522 is a Dell BIOS trust/credentials management vulnerability. A local authenticated attacker could reset the BIOS password via the Manageability Interface, potentially exposing sensitive information on NVMe storage. Affected component is Dell BIOS (trust/credentials management). Root ...
CVE-2021-21522
Dell BIOS contains a Credentials Management issue. A local authenticated malicious user may potentially exploit this vulnerability to gain access to sensitive information on an NVMe storage by resetting the BIOS password on the system via the Manageability Interface...
PT-2021-14574 · Dell · Dell Bios
Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: The issue is related to Credentials Management in Dell BIOS. A local authenticated malicious user may potentially exploit this to gain access to sensitive information on an NVMe storage b...
Dell BIOS 安全漏洞
DELL Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via the HTTP method. Dell BIOS has a security vulnerability that stems from the authentication mechanism not being brute force protected. A local administrator can...
WordPress Allow REL= and HTML in Author Bios plugin <= .1 - Stored Cross-Site Scripting (XSS) vulnerability
Stored Cross-Site Scripting XSS vulnerability discovered by Veshraj Ghimire in WordPress Allow REL= and HTML in Author Bios plugin versions = .1. Solution Deactivate and delete. This plugin has been closed as of July 22, 2021 and is not available for download. Reason: Security Issue...
Dell BIOS 输入验证错误漏洞
DELL Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via the HTTP method. An input validation error vulnerability exists in Dell BIOS that stems from insufficient validation of user-supplied input in SMRAM. A local...
Dell BIOS 安全漏洞
DELL Dell BIOSConnect is an underlying platform from Dell USA that enables BIOS to connect to Dell's HTTP backend and load images via the HTTP method. Dell BIOS has a security vulnerability that stems from the authentication mechanism not being brute force protected. A local administrator can...
The vulnerability of the BIOS configuration in the BSSA DFT microprogramming software for Intel Xeon Scalable Processors, Intel Xeon Processors D, Intel Xeon Processors E5 v4, Intel Xeon Processors E5 v3, and Intel Xeon Processors W allows a hacker to gain increased privileges.
The vulnerability of the BIOS configuration designed for testing microprogramming software for Intel Xeon Scalable Processors, Intel Xeon Processors D, Intel Xeon Processors E5 v4, Intel Xeon Processors E5 v3, and Intel Xeon Processors W is related to initialization errors. Exploiting this...
Vulnerabilities fixed in Dell BIOS
Vulnerabilities have been fixed in the BIOS of a number of Dell products. These vulnerabilities allow a local malicious person to able to access sensitive information and execute execute arbitrary code. Dell has released updates to fix the vulnerabilities. More information can be found on the pag...
CVE-2021-36284
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive admin password attempt mitigations in order to carry out a brute force attack...
CVE-2021-36285
Dell BIOS contains an Improper Restriction of Excessive Authentication Attempts vulnerability. A local authenticated malicious administrator could exploit this vulnerability to bypass excessive NVMe password attempt mitigations in order to carry out a brute force attack...
CVE-2021-36283
Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...
