426 matches found
CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...
CVE-2024-29980 Unsafe Handling of IHV UEFI Variables
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...
CVE-2024-29979
CVE-2024-29979 affects Phoenix SecureCore on Intel Kaby Lake, Coffee Lake, Comet Lake and Ice Lake. The vulnerability is an Improper Check for Unusual or Exceptional Conditions that allows Input Data Manipulation. Affected versions are: Kaby Lake before 4.0.1.1012; Coffee Lake before 4.1.0.568; C...
CVE-2024-29979 Unsafe Handling of Phoenix UEFI Variables
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...
CVE-2024-29980 Unsafe Handling of IHV UEFI Variables
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...
CVE-2024-29980
CVE-2024-29980 affects Phoenix SecureCore software across Intel Kaby Lake, Coffee Lake, Comet Lake and Ice Lake. Root cause: improper check for unusual or exceptional conditions leading to input data manipulation. Affected versions: Kaby Lake before 4.0.1.1012; Coffee Lake before 4.1.0.568; Comet...
CVE-2024-29980: Improper Check for Unusual or Exceptional Conditions
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...
PT-2025-2402
Name of the Vulnerable Software and Affected Versions: Phoenix SecureCore for Intel Kaby Lake versions prior to 4.0.1.1012 Phoenix SecureCore for Intel Coffee Lake versions prior to 4.1.0.568 Phoenix SecureCore for Intel Comet Lake versions prior to 4.2.1.292 Phoenix SecureCore for Intel Ice Lake...
CVE-2024-29979: Improper Check for Unusual or Exceptional Conditions
Improper Check for Unusual or Exceptional Conditions vulnerability in Phoenix SecureCore™ for Intel Kaby Lake, Phoenix SecureCore™ for Intel Coffee Lake, Phoenix SecureCore™ for Intel Comet Lake, Phoenix SecureCore™ for Intel Ice Lake allows Input Data Manipulation.This issue affects SecureCore™...
Malicious code in comet-chat-react-ui-kit (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9a6f38c4d9dd2413e237c8d146d5fcf11d04f613910b552a32a52b3e4cf199f6 The OpenSSF Package Analysis project identified 'comet-chat-react-ui-kit' @ 1.0.1 npm as malicious. It is considered malicious because: - The...
CVE-2024-0762
Potential buffer overflow in unsafe UEFI variable handling in Phoenix SecureCore™ for select Intel platforms This issue affects: Phoenix SecureCore™ for Intel Kaby Lake: from 4.0.1.1 before 4.0.1.998; Phoenix SecureCore™ for Intel Coffee Lake: from 4.1.0.1 before 4.1.0.562; Phoenix SecureCore™ fo...
CVE-2024-0762
CVE-2024-0762 affects Phoenix SecureCore UEFI firmware across Intel families (Kaby Lake through Meteor Lake) with a buffer overflow in unsafe UEFI variable handling that could allow local privilege escalation and firmware code execution. Affected Cisco? No, Phoenix SecureCore versions: Kaby Lake ...
comet-net.ch Cross Site Scripting vulnerability OBB-3913825
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CTokenV3Collateral._underlyingRefPerTok should use the decimals from underlying Comet.
Lines of code Vulnerability details Impact CTokenV3Collateral.underlyingRefPerTok uses erc20Decimals which is the decimals of CusdcV3Wrapper. But it should use the decimals of the underlying Comet. Proof of Concept CTokenV3Collateral.underlyingRefPerTokcomputes the actual quantity of whole...
Lack of protection when caling CusdcV3Wrapper._withdraw
Lines of code Vulnerability details Impact When unwrapping the wComet to its rebasing comet, users with an equivalent amount of wComet invoking CusdcV3Wrapper.withdraw at around the same time could end up having different percentage gains because comet is not linearly rebasing. Moreover, the...
Null pointer dereference
Incorrect pointer checks within the the FwBlockServiceSmm driver can allow arbitrary RAM modifications During review of the FwBlockServiceSmm driver, certain instances of SpiAccessLib could be tricked into writing 0xff to arbitrary system and SMRAM addresses. Fixed in: INTEL Purley-R: 05.21.51.00...
Binary Vulnerability in Movie Star Comet Music
Movie Star Comet Music is a pure green universal audio and video player with a simple and easy-to-use interface that supports most of the network video formats. AV Star Comet Music has a binary vulnerability that can be exploited by attackers to cause a denial of service...
Updated kernel packages fix security vulnerabilities
This update is based on upstream 5.5.9 and fixes at least the following security vulnerabilities: In the Linux kernel 5.4.0-rc2, there is a use-after-free read in the blkaddtrace function in kernel/trace/blktrace.c which is used to fill out a blkiotrace structure and place it in a per-cpu...
comet-srl.it Cross Site Scripting vulnerability
Security Researcher Gh05tPT Helped patch 6844 vulnerabilities Received 10 Coordinated Disclosure badges Received 48 recommendations , a holder of 10 badges for responsible and coordinated disclosure, found a security vulnerability affecting comet-srl.it website and its users. Following coordinate...
