CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

988 matches found

Debian CVE•added 2025/11/26 5:33 p.m.•7 views

CVE-2025-2486

The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based...

8.8CVSS8AI score0.00116EPSS

Exploits0

AlpineLinux•added 2025/11/26 5:33 p.m.•9 views

CVE-2025-2486

8.8CVSS7AI score0.00256EPSS

Exploits0References1

Tenable Nessus•added 2025/11/20 12:0 a.m.•7 views

TencentOS Server 4: edk2 (TSSA-2025:0336)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0336 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

4.6CVSS6.1AI score0.0023EPSS

Exploits0References2

Tenable Nessus•added 2025/11/20 12:0 a.m.•6 views

TencentOS Server 4: edk2 (TSSA-2025:0729)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0729 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

6.3CVSS6.8AI score0.00207EPSS

Exploits0References2

AstraLinux•added 2025/11/01 10:54 a.m.•4 views

Astra Linux – Vulnerability in edk2

EDK2 contains a vulnerability in the BIOS, where an attacker can cause a “Protection Mechanism Failure” through local access. Successful exploitation of this vulnerability will lead to the execution of arbitrary code, compromising Confidentiality, Integrity, and Availability...

7CVSS6.5AI score0.0015EPSS

Exploits0References3

CBLMariner•added 2025/10/15 9:15 p.m.•4 views

CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10

CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10. A patched version of the package is available...

7.5CVSS6.8AI score0.01744EPSS

Exploits0

Amazon•added 2025/10/14 12:0 a.m.•6 views

Medium: edk2

Issue Overview: Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds...

7.5CVSS7.3AI score0.01744EPSS

Exploits0