Show filters
222 Total Results
Displaying 41-50 of 222
Sort by:
Attacker Value
Unknown

CVE-2023-25756

Disclosure Date: November 14, 2023 (last updated December 01, 2023)
Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent access.
Attacker Value
Unknown

CVE-2023-22329

Disclosure Date: November 14, 2023 (last updated November 29, 2023)
Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacent access.
Attacker Value
Unknown

CVE-2023-44216

Disclosure Date: September 27, 2023 (last updated October 09, 2023)
PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing attacks against feTurbulence and feBlend in the SVG Filter specification, aka a GPU.zip issue. For example, attackers can sometimes accurately determine text contained on a web page from one origin if they control a resource from a different origin.
Attacker Value
Unknown

CVE-2023-32461

Disclosure Date: September 15, 2023 (last updated October 08, 2023)
Dell PowerEdge BIOS and Dell Precision BIOS contain a buffer overflow vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, leading to corrupt memory and potentially escalate privileges.  
Attacker Value
Unknown

CVE-2022-40982

Disclosure Date: August 11, 2023 (last updated October 08, 2023)
Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.
Attacker Value
Unknown

CVE-2023-2625

Disclosure Date: June 28, 2023 (last updated October 08, 2023)
A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of access VIEWER to ADMIN. To exploit the vulnerability the attacker can inject shell commands through a particular field of the web user interface that will be executed by the system.
Attacker Value
Unknown

CVE-2022-31639

Disclosure Date: June 13, 2023 (last updated October 08, 2023)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Attacker Value
Unknown

CVE-2022-31638

Disclosure Date: June 13, 2023 (last updated October 08, 2023)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Attacker Value
Unknown

CVE-2022-31637

Disclosure Date: June 13, 2023 (last updated October 08, 2023)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
Attacker Value
Unknown

CVE-2022-31636

Disclosure Date: June 13, 2023 (last updated October 08, 2023)
Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.