Search vulnerabilities

Expected end of text, found 'ć' (at char 17), (line:1, col:18)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,868

CVE-2021-28213

edk2: encrypted private key in the IpSecDxe.efi present potential security risks

Example EDK2 encrypted private key in the IpSecDxe.efi present potential security risks.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Tianocore
Products
Edk2
CVE-2021-28209

ASUS BMC's firmware: path traversal - Delete video file function

The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28208

ASUS BMC's firmware: path traversal - Get video file function

The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28207

ASUS BMC's firmware: path traversal - Get Help file function

The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28206

ASUS BMC's firmware: path traversal - Record video file function

The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28205

ASUS BMC's firmware: path traversal - Delete SOL video file function

The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files.

CVSS 3.1 · 4.9 Medium EPSS 2.0% KEV · Not listed
Vendors
Asus
Products
Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more
CVE-2021-28204

ASUS BMC's firmware: command injection - Modify user’s information function

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.

CVSS 3.1 · 7.2 High EPSS 2.1% KEV · Not listed
Vendors
Asus
Products
Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more
CVE-2021-28203

ASUS BMC's firmware: command injection - Web Set Media Image function

The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary.

CVSS 3.1 · 7.2 High EPSS 2.0% KEV · Not listed
Vendors
Asus
Products
Asmb8-ikvm Asmb8-ikvm Firmware Z10pe-d16 Ws and 3 more
CVE-2021-28202

ASUS BMC's firmware: buffer overflow - Service configuration-2 function

The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28201

ASUS BMC's firmware: buffer overflow - Service configuration-1 function

The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28200

ASUS BMC's firmware: buffer overflow - CD media configuration function

The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28199

ASUS BMC's firmware: buffer overflow - Modify user’s information function

The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28198

ASUS BMC's firmware: buffer overflow - Firmware protocol configuration

The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28197

ASUS BMC's firmware: buffer overflow - Active Directory configuration function

The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28196

ASUS BMC's firmware: buffer overflow - Generate SSL certificate function

The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.1% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28195

ASUS BMC's firmware: buffer overflow - Radius configuration function

The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28194

ASUS BMC's firmware: buffer overflow - Remote image configuration setting

The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more
CVE-2021-28193

ASUS BMC's firmware: buffer overflow - SMTP configuration function

The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service.

CVSS 3.1 · 4.9 Medium EPSS 1.9% KEV · Not listed
Vendors
Asus
Products
Asmb9-ikvm Asmb9-ikvm Firmware E700 G4 and 85 more