Lucene search
+L

7012 matches found

BDU FSTEC
BDU FSTEC
added 2020/12/01 12:0 a.m.8 views

The vulnerability of the potentially dangerous function of Intel processor BIOS microprogramming software, which allows a hacker to enhance their privileges

The vulnerability of the potentially dangerous function of Intel processor BIOS microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

4.6CVSS7.2AI score0.00419EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2020/11/30 12:0 a.m.51 views

openSUSE Security Update : ucode-intel (openSUSE-2020-2098)

This update for ucode-intel fixes the following issues : - Updated Intel CPU Microcode to 20201118 official release. bsc1178971 - Removed TGL/06-8c-01/80 due to functional issues with some OEM platforms. - Updated Intel CPU Microcode to 20201110 official release. - CVE-2020-8695: Fixed Intel RAPL...

5.5CVSS7.1AI score0.00516EPSS
SaveExploits0References18
CNVD
CNVD
added 2020/11/24 12:0 a.m.3 views

IBM Power processor information disclosure vulnerability

The IBM Power System is a Power processor-based server computer from IBM in the United States. A security vulnerability exists in IBM Power9 processor, which can be exploited by an attacker to obtain sensitive information from data in the L1 cache under the right circumstances...

5.1CVSS6.2AI score0.00378EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/11/23 6:58 p.m.9 views

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

5.5CVSS6.3AI score0.00516EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2020/11/23 6:0 p.m.6 views

hw: Vector Register Leakage-Active

A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...

5.5CVSS6.5AI score0.00444EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2020/11/23 5:49 p.m.5 views

hw: Vector Register Leakage-Active

A flaw was found in the Intel Advanced Vector Extensions AVX implementation, where a local authenticated attacker with the ability to execute AVX instructions can gather the AVX register state from previous AVX executions. This vulnerability allows information disclosure of the AVX register state...

5.5CVSS6.5AI score0.00444EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2020/11/23 5:48 p.m.7 views

hw: Fast forward store predictor

A flaw was found in the CPU microarchitecture where a local attacker is able to abuse a timing issue which may allow them to infer internal architectural state from previous executions on the CPU...

5.5CVSS6.3AI score0.00516EPSS
SaveExploits0References6
CVE
CVE
added 2020/11/20 3:45 a.m.381 views

CVE-2020-4788

CVE-2020-4788 affects IBM Power9 processors (AIX 7.1, 7.2, and VIOS 3.1) and allows a local attacker to obtain sensitive information from data in the L1 cache under extenuating circumstances. The connected IBM advisory lists remediation through iFixes/APARs: AIX 7.1.5.x (APAR IJ28229 family), AIX...

5.1CVSS5.7AI score0.00378EPSS
SaveExploits0References7Affected Software2
CNNVD
CNNVD
added 2020/11/19 12:0 a.m.10 views

IBM i 安全漏洞

The IBM Power System is a Power processor-based server computer from IBM in the United States. A security vulnerability exists in IBM Power9 processor, which can be exploited by an attacker to obtain sensitive information from data in the L1 cache under the right circumstances...

5.1CVSS6.4AI score0.00378EPSS
SaveExploits0References37
Microsoft Malware Protection
Microsoft Malware Protection
added 2020/11/17 2:0 p.m.63 views

Meet the Microsoft Pluton processor – The security chip designed for the future of Windows PCs

The role of the Windows PC and trust in technology are more important than ever as our devices keep us connected and productive across work and life. Windows 10 is the most secure version of Windows ever, built with end-to-end security for protection from the edge to the cloud all the way down to...

0.6AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2020/11/17 2:0 p.m.36 views

Microsoft's Making a Secure PC Chip—With Intel and AMD's Help

The Pluton security processor will give the software giant an even more prominent role in locking down Windows hardware...

2.1AI score
SaveExploits0
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/14 12:0 a.m.37 views

Security update for ucode-intel (moderate)

openSUSE Security Update: Security update for ucode-intel Announcement ID: openSUSE-SU-2020:1923-1 Rating: moderate References: 1170446 1173594 Cross-References: CVE-2020-8695 CVE-2020-8698 Affected Products: openSUSE Leap 15.2 An update that fixes two vulnerabilities is now available. Descriptio...

5.5CVSS6.8AI score0.00516EPSS
SaveExploits0References2
CNVD
CNVD
added 2020/11/13 12:0 a.m.1 views

Denial of Service Vulnerability in the MP3009 Processor of the Schneider Tricon Safety Instrumented System (CNVD-2020-67123)

The Tricon Safety Instrumented System is a safety instrumented system from Schneider Electric Co. The MP3009 module is the processor module for the Schneider Tricon Safety Instrumented System. A denial of service vulnerability exists in the MP3009 processor of the Schneider Tricon Safety...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/11/13 12:0 a.m.3 views

Denial of Service Vulnerability in the MP3009 Processor of the Schneider Tricon Safety Instrumented System (CNVD-2020-67121)

The Tricon Safety Instrumented System is a safety instrumented system from Schneider Electric Co. The MP3009 module is the processor module for the Schneider Tricon Safety Instrumented System. A denial of service vulnerability exists in the MP3009 processor of the Schneider Tricon Safety...

7AI score
SaveExploits0
CNVD
CNVD
added 2020/11/13 12:0 a.m.2 views

Denial of Service Vulnerability in the MP3009 Processor of the Schneider Tricon Safety Instrumented System (CNVD-2020-67122)

The Tricon Safety Instrumented System is a safety instrumented system from Schneider Electric Co. The MP3009 module is the processor module for the Schneider Tricon Safety Instrumented System. A denial of service vulnerability exists in the MP3009 processor of the Schneider Tricon Safety...

7AI score
SaveExploits0
NVD
NVD
added 2020/11/12 7:15 p.m.30 views

CVE-2020-12335

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.8AI score0.00282EPSS
SaveExploits0References1
OSV
OSV
added 2020/11/12 7:15 p.m.7 views

CVE-2020-12335

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.8CVSS7.1AI score0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/11/12 6:17 p.m.40 views

CVE-2020-12335

Improper permissions in the installer for the IntelR Processor Identification Utility before version 6.4.0603 may allow an authenticated user to potentially enable escalation of privilege via local access...

7.9AI score0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2020/11/12 6:17 p.m.59 views

CVE-2020-12335

The vulnerability CVE-2020-12335 affects Intel® Processor Identification Utility before version 6.4.0603. The issue is described as improper permissions in the installer that may allow an authenticated local user to escalate privileges. This is supported by the Intel advisory (INTEL-SA-00419), wh...

7.8CVSS7.7AI score0.00282EPSS
SaveExploits0References1Affected Software1
Debian CVE
Debian CVE
added 2020/11/12 6:3 p.m.35 views

CVE-2020-8694

Insufficient access control in the Linux kernel driver for some IntelR Processors may allow an authenticated user to potentially enable information disclosure via local access...

5.5CVSS5.8AI score0.00451EPSS
SaveExploits0
Rows per page
Query Builder