Show filters
214 Total Results
Displaying 21-30 of 214
Sort by:
Attacker Value
Unknown

CVE-2024-32859

Disclosure Date: June 13, 2024 (last updated September 20, 2024)
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Attacker Value
Unknown

CVE-2024-32858

Disclosure Date: June 13, 2024 (last updated September 25, 2024)
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Attacker Value
Unknown

CVE-2024-32856

Disclosure Date: June 13, 2024 (last updated September 25, 2024)
Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Attacker Value
Unknown

CVE-2024-0160

Disclosure Date: June 12, 2024 (last updated September 26, 2024)
Dell Client Platform contains an incorrect authorization vulnerability. An attacker with physical access to the system could potentially exploit this vulnerability by bypassing BIOS authorization to modify settings in the BIOS.
Attacker Value
Unknown

CVE-2023-32475

Disclosure Date: June 07, 2024 (last updated October 30, 2024)
Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system.
Attacker Value
Unknown

CVE-2024-22448

Disclosure Date: April 10, 2024 (last updated February 05, 2025)
Dell BIOS contains an Out-of-Bounds Write vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
Attacker Value
Unknown

CVE-2023-20579

Disclosure Date: February 13, 2024 (last updated October 23, 2024)
Improper Access Control in the AMD SPI protection feature may allow a user with Ring0 (kernel mode) privileged access to bypass protections potentially resulting in loss of integrity and availability.
Attacker Value
Unknown

CVE-2023-28063

Disclosure Date: February 06, 2024 (last updated February 15, 2024)
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
Attacker Value
Unknown

CVE-2024-0317

Disclosure Date: January 15, 2024 (last updated January 31, 2024)
Cross-Site Scripting in FireEye EX, affecting version 9.0.3.936727. Exploitation of this vulnerability allows an attacker to send a specially crafted JavaScript payload via the 'type' and 's_f_name' parameters to an authenticated user to retrieve their session details.
Attacker Value
Unknown

CVE-2023-46143

Disclosure Date: December 14, 2023 (last updated December 22, 2023)
Download of Code Without Integrity Check vulnerability in PHOENIX CONTACT classic line PLCs allows an unauthenticated remote attacker to modify some or all applications on a PLC.