EUVD-2024-17059

Malicious code in bioql PyPI...

EUVD-2022-39465

Malicious code in bioql PyPI...

EUVD-2023-49539

Malicious code in bioql PyPI...

EUVD-2024-54393

Malicious code in bioql PyPI...

EUVD-2023-49536

Malicious code in bioql PyPI...

EUVD-2023-49542

Malicious code in bioql PyPI...

EUVD-2022-39463

Malicious code in bioql PyPI...

EUVD-2023-49537

Malicious code in bioql PyPI...

CVE-2025-3770 affecting package edk2 for versions less than 20230301gitf80f052277c8-43

CVE-2025-3770 affecting package edk2 for versions less than 20230301gitf80f052277c8-43. A patched version of the package is available...

AZL-68082 CVE-2025-9230 affecting package edk2 for versions less than 20240524git3e722403cd16-10

Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service for an application. The out-of-bounds write can cause a...

ROS-20250930-06

Tianocore EDK2 library vulnerability is related to insecure IDT register handling during SMM login. Exploitation of the vulnerability allows an attacker to escalate privileges in the system...

Amazon Linux 2 : edk2, --advisory ALAS2-2025-2996 (ALAS-2025-2996)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2996 advisory. EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service. CVE-2024-388...

CVE-2025-3770 affecting package edk2 for versions less than 20240524git3e722403cd16-9

CVE-2025-3770 affecting package edk2 for versions less than 20240524git3e722403cd16-9. A patched version of the package is available...

Linux Distros Unpatched Vulnerability : CVE-2023-48733

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS- resident attacker to bypass Secure Boot. CVE-2023-48733 No...

Linux Distros Unpatched Vulnerability : CVE-2024-38805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2025-2295

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2021-28213

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks. CVE-2021-28213 Note that Nessus relies on the presence of the package a...

Fedora 29 : edk2 (2019-bff1cbaba3)

The remote Fedora 29 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2019-bff1cbaba3 advisory. Use YYYYMMDD versioning to fix upgrade path ---- Update to stable-201903 Update to openssl-1.1.0j Move to python3 deps Tenable has extracted the...

Important: edk2

Issue Overview: EDK2 contains a vulnerability in BIOS where an attacker may cause "Protection Mechanism Failure" by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability. CVE-2025-3770 Affected...

SUSE CVE-2024-38805

EDK2 contains a vulnerability in BIOS where a user may cause an Integer Overflow or Wraparound by network means. A successful exploitation of this vulnerability may lead to denial of service...