Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to overwrite sensitive files via a specially crafted HTTP request...

PT-2025-7057 · Nitrokey · Nitrokey 3 Firmware

Name of the Vulnerable Software and Affected Versions: Nitrokey 3 Firmware versions 1.8.0 and prior test releases with PIV enabled Description: The PIV application in the Nitrokey 3 Firmware could accept invalid keys for authentication of the admin key, potentially compromising the integrity of t...

Q-Free MAXTIME Suite 安全漏洞

Q-Free MAXTIME Suite is a software suite for local traffic signal management from Q-Free. A security vulnerability exists in Q-Free MAXTIME Suite version 2.11.0 and prior versions. An attacker could exploit the vulnerability to overwrite sensitive files via a specially crafted HTTP request...

CVE-2023-31345

CVE-2023-31345 is an AMD SMM-handling vulnerability in AMD Secure Processor firmware. The issue stems from improper input validation in the SMM handler, which could allow a privileged attacker to overwrite SMRAM and potentially achieve arbitrary code execution. Affected context is AMD client/serv...

CVE-2023-31343

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

CVE-2023-31343

Summary: CVE-2023-31343 is an AMD processor firmware vulnerability in the System Management Mode (SMM) handler. Connected sources describe improper input validation in the SMM handler that could let a privileged attacker overwrite SMRAM, potentially enabling arbitrary code execution on affected s...

CVE-2023-31342

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

CVE-2023-31342

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

CVE-2023-31342

CVE-2023-31342 corresponds to an AMD SMM handler weakness where improper input validation can enable a privileged attacker to overwrite SMRAM, potentially enabling arbitrary code execution. The vulnerability is associated with AMD Secure Processor and related platform firmware. Affected detail fr...

CVE-2024-0179

SMM Callout vulnerability within the AmdCpmDisplayFeatureSMM driver could allow locally authenticated attackers to overwrite SMRAM, potentially resulting in arbitrary code execution...

CVE-2024-0179

CVE-2024-0179 is an SMM Callout vulnerability in the AmdCpmDisplayFeatureSMM UEFI module that could allow locally authenticated attackers to overwrite SMRAM and execute arbitrary code. Root cause: insufficient input/data validation in the SMM callout mechanism. Impact: potential kernel- or ring-0...

CVE-2024-21925

Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution...

CVE-2024-21925

Improper input validation within the AmdPspP2CmboxV2 driver may allow a privileged attacker to overwrite SMRAM, leading to arbitrary code execution...

CVE-2024-21925

CVE-2024-21925 concerns the AmdPspP2CmboxV2 driver in the UEFI module. The flaw arises from insufficient input validation, enabling a privileged local attacker to overwrite SMRAM and achieve arbitrary code execution. Documentation notes this as a System Management Mode (SMM) related vulnerability...

CVE-2024-33659

AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, a...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: Media: aspeed – Fixed memory overwriting issues when the resolution is 1600x900. When displaying at a resolution of 1600x900, the system may crash if the system’s memory usage is tight. How to reproduce this issue: 1. Use a...

Astra Linux – Vulnerability in gst-plugins-base1.0

GStreamer is a library for constructing graphs of media-handling components. A stack-buffer overflow has been detected in the vorbishandleidentificationpacket function within gstvorbisdec.c. The position array is a stack-allocated buffer of size 64. If vd-vi.channels exceeds 64, the for loop will...

AMD System Management Mode 安全漏洞

AMD System Management Mode is a system management mode from Ultraviolet Semiconductor AMD. A CPU execution mode. AMD System Management Mode suffers from a security vulnerability that stems from an SMMCallout vulnerability that could allow a local authenticated attacker to overwrite SMRAM, which...

Azure Linux 3.0 Security Update: kernel (CVE-2007-4998)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2007-4998 advisory. - cp, when running with an option to preserve symlinks on multiple OSes, allows local, user-assisted attackers ...

Elber Communications Equipment 安全漏洞

Elber Communications Equipment is a communications equipment from Elber. A security vulnerability exists in Elber Communications Equipment that stems from an authentication bypass issue that could allow an attacker to overwrite a user's password and gain unauthorized access...