Lucene search
+L

11368 matches found

NVD
NVD
•added 2021/03/03 5:15 p.m.•32 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS0.00794EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2021/03/03 4:40 p.m.•32 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS7.8AI score0.00794EPSS
SaveExploits0
Mend
Mend
•added 2021/03/03 4:40 p.m.•6 views

CVE-2020-25647

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

8.6CVSS0.00794EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/03 12:00 a.m.•9 views

CVE-2020-25647: Out-of-bounds Write

A flaw was found in grub2 in versions prior to 2.06. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution...

7.6CVSS6.7AI score0.00794EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2021/03/02 9:13 p.m.•31 views

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

7.6CVSS6.2AI score0.00794EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2021/03/02 7:23 p.m.•17 views

grub2: Out-of-bounds write in grub_usb_device_initialize()

A flaw was found in grub2. During USB device initialization, descriptors are read with very little bounds checking and assumes the USB device is providing sane values. If properly exploited, an attacker could trigger memory corruption leading to arbitrary code execution allowing a bypass of the...

7.6CVSS6.2AI score0.00794EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/03/01 12:00 a.m.•6 views

PT-2021-2471

Name of the Vulnerable Software and Affected Versions Android kernel Description The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed. No use...

4.4CVSS0.00129EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2021/03/01 12:00 a.m.•4 views

PT-2021-2500

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to the Titan M security module in Android operating systems and is caused by initialization errors. This could lead to local information disclosure with System execution privileges needed. No...

4.4CVSS0.00129EPSS
SaveExploits0References5
NVD
NVD
•added 2021/02/26 3:15 a.m.•22 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS0.00584EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2021/02/26 3:15 a.m.•6 views

DEBIAN-CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.4AI score0.00584EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2021/02/26 3:15 a.m.•16 views

AZL-6924 CVE-2020-24455 affecting package tpm2-tss for versions less than 2.4.6-1

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.6AI score0.00584EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2021/02/26 3:15 a.m.•35 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.7AI score0.00584EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/02/26 3:15 a.m.•15 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.4AI score0.00584EPSS
SaveExploits0References7
Prion
Prion
•added 2021/02/26 3:15 a.m.•26 views

Privilege escalation

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

4.6CVSS6.4AI score0.00584EPSS
SaveExploits0References5Affected Software2
Cvelist
Cvelist
•added 2021/02/26 2:55 a.m.•60 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.4AI score0.00584EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2021/02/26 2:55 a.m.•89 views

CVE-2020-24455

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS6.5AI score0.00584EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/02/26 12:00 a.m.•7 views

CVE-2020-24455: Missing Initialization of Resource

Missing initialization of a variable in the TPM2 source may allow a privileged user to potentially enable an escalation of privilege via local access. This affects tpm2-tss before 3.0.1 and before 2.4.3...

6.7CVSS5.9AI score0.00584EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2021/02/23 12:00 a.m.•19 views

Intel Ethernet I210 DoS

The vulnerability of Intel Ethernet I210 controller’s microprogramming software is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

6.7CVSS5.5AI score0.00249EPSS
SaveExploits0References3Affected Software1
osv_cve
osv_cve
•added 2021/02/17 2:15 p.m.•9 views

CVE-2020-0522

Improper initialization in the firmware for the IntelR Ethernet I210 Controller series of network adapters before version 3.30 may allow a privileged user to potentially enable denial of service via local access...

4.4CVSS5.8AI score0.00249EPSS
SaveExploits0References1
CVE
CVE
•added 2021/02/17 1:57 p.m.•99 views

CVE-2020-0522

The CVE-2020-0522 issue affects the Intel Ethernet I210 Controller series: firmware initialization error prior to version 3.30 can allow a privileged user to cause a local denial of service. Affected products include Intel I210 adapters across various bundles (e.g., BIG-IP-related deployments ref...

4.4CVSS4.3AI score0.00249EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder