Latest CVE Feed
-
7.5
HIGHCVE-2021-28236
LibreDWG v0.12.3 was discovered to contain a NULL pointer dereference via out_dxfb.c.... Read more
Affected Products : libredwg- Published: Dec. 02, 2021
- Modified: Nov. 21, 2024
-
8.8
HIGHCVE-2021-28233
Heap-based Buffer Overflow vulnerability exists in ok-file-formats 1 via the ok_jpg_generate_huffman_table function in ok_jpg.c.... Read more
Affected Products : ok-file-formats- Published: Aug. 27, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-28216
BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE.... Read more
Affected Products : edk_ii- Published: Aug. 05, 2021
- Modified: Nov. 21, 2024
-
7.5
HIGHCVE-2021-28213
Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.... Read more
- Published: Jun. 11, 2021
- Modified: Nov. 21, 2024
-
6.7
MEDIUMCVE-2021-28211
A heap overflow in LzmaUefiDecompressGetInfo function in EDK II.... Read more
- Published: Jun. 11, 2021
- Modified: Nov. 21, 2024
-
7.8
HIGHCVE-2021-28210
An unlimited recursion in DxeCore in EDK II.... Read more
- Published: Jun. 11, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28209
The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28208
The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28207
The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28206
The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
6.8
MEDIUMCVE-2021-28205
The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system file... Read more
Affected Products : z10pr-d16_firmware asmb8-ikvm_firmware z10pe-d16_ws_firmware z10pr-d16 asmb8-ikvm z10pe-d16_ws- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2021-28204
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbit... Read more
Affected Products : z10pr-d16_firmware asmb8-ikvm_firmware z10pe-d16_ws_firmware z10pr-d16 asmb8-ikvm z10pe-d16_ws- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
7.2
HIGHCVE-2021-28203
The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.... Read more
Affected Products : z10pr-d16_firmware asmb8-ikvm_firmware z10pe-d16_ws_firmware z10pr-d16 asmb8-ikvm z10pe-d16_ws- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28202
The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to a... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28201
The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to a... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28200
The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to ab... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28199
The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attacker... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28198
The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leak... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28197
The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leaka... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024
-
4.9
MEDIUMCVE-2021-28196
The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers... Read more
- Published: Apr. 06, 2021
- Modified: Nov. 21, 2024