Lucene search
+L

4406 matches found

osv_cve
osv_cve
•added 2021/03/03 5:15 p.m.•38 views

CVE-2020-14372

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

7.5CVSS2.7AI score
SaveExploits0References5
osv_debian
osv_debian
•added 2021/03/03 5:15 p.m.•9 views

DEBIAN-CVE-2020-14372

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

7.5CVSS6.6AI score0.01738EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2021/03/03 5:15 p.m.•15 views

AZL-6460 CVE-2020-14372 affecting package grub2 for versions less than 2.06~rc1-7

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

7.5CVSS6.8AI score0.01738EPSS
SaveExploits0References1
Prion
Prion
•added 2021/03/03 5:15 p.m.•39 views

Design/Logic Flaw

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

6.2CVSS7AI score0.01738EPSS
SaveExploits0References5Affected Software7
Debian CVE
Debian CVE
•added 2021/03/03 4:40 p.m.•33 views

CVE-2020-14372

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

7.5CVSS6.8AI score0.01738EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/03/03 12:00 a.m.•5 views

CVE-2020-14372: Incomplete List of Disallowed Inputs

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

7.5CVSS6.1AI score0.01738EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/03/03 12:00 a.m.•32 views

PT-2021-2254 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software versions affected versions not specified Description: A vulnerability in the Image Signature Verification feature could allow an authenticated, remote attacker with Administrator-level credentials to install a malicious...

6.8CVSS6.6AI score0.00409EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2021/03/02 9:13 p.m.•15 views

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/02 8:14 p.m.•13 views

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/02 7:55 p.m.•9 views

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/02 7:39 p.m.•16 views

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/02 7:28 p.m.•17 views

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/02 7:23 p.m.•16 views

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
•added 2021/03/02 7:19 p.m.•16 views

grub2: acpi command allows privileged user to load crafted ACPI tables when Secure Boot is enabled

A flaw was found in GRUB 2, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdown variable content direct...

7.5CVSS5.8AI score0.01738EPSS
SaveExploits0References5
UbuntuCve
UbuntuCve
•added 2021/03/02 6:00 p.m.•50 views

CVE-2020-14372

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

7.5CVSS6.8AI score0.01738EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2021/03/02 6:00 p.m.•13 views

UBUNTU-CVE-2020-14372

A flaw was found in grub2 in versions prior to 2.06, where it incorrectly enables the usage of the ACPI command when Secure Boot is enabled. This flaw allows an attacker with privileged access to craft a Secondary System Description Table SSDT containing code to overwrite the Linux kernel lockdow...

7.5CVSS6.8AI score0.01738EPSS
SaveExploits0References3
osv_osv
osv_osv
•added 2021/02/28 12:00 a.m.•20 views

OSV-2021-451 Heap-buffer-overflow in void apply_sao_internal<unsigned short>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31485 Crash type: Heap-buffer-overflow READ 1 Crash state: void applysaointernal void applysao threadtasksao::work...

7.2AI score
SaveExploits0References1
NVD
NVD
•added 2021/02/23 4:15 a.m.•36 views

CVE-2020-27768

In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0...

4.3CVSS0.01411EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2021/02/23 4:15 a.m.•15 views

DEBIAN-CVE-2020-27768

In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0...

3.3CVSS6.4AI score0.01411EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2021/02/23 4:15 a.m.•20 views

UBUNTU-CVE-2020-27768

In ImageMagick, there is an outside the range of representable values of type 'unsigned int' at MagickCore/quantum-private.h. This flaw affects ImageMagick versions prior to 7.0.9-0...

3.3CVSS6.7AI score0.01411EPSS
SaveExploits0References4
Rows per page
Query Builder