8.2

CVSS3.1

CVE-2025-4425 - SetupAutomationSmm: Stack overflow vulnerability in SMI handler

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β  https://support.lenovo.com/us/en/product_security/home

πŸ“… Published: July 30, 2025, 12:45 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

6

CVSS3.1

CVE-2025-4424 - SetupAutomationSmm : Arbitrary calls to SmmSetVariable with unsanitised arguments in SMI handler

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β  https://support.lenovo.com/us/en/product_security/home

πŸ“… Published: July 30, 2025, 12:43 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

8.2

CVSS3.1

CVE-2025-4423 - SetupAutomationSmm:Vulnerability in the SMM module allow attacker to write arbitrary code and lead …

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β  https://support.lenovo.com/us/en/product_security/home

πŸ“… Published: July 30, 2025, 12:42 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

8.2

CVSS3.1

CVE-2025-4422 - EfiSmiServices : EfiPcdProtocol, SMM memory corruption vulnerabilities in SMM module

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β  https://support.lenovo.com/us/en/product_security/home

πŸ“… Published: July 30, 2025, 12:40 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

8.2

CVSS3.1

CVE-2025-4421 - EfiSmiServices: gEfiSmmCpuProtocol, SMM memory corruption vulnerabilities in SMM module

The vulnerability was identified in the code developed specifically for Lenovo. Please visit "Lenovo Product Security Advisories and Announcements" webpage for more information about the vulnerability.Β  https://support.lenovo.com/us/en/product_security/home

πŸ“… Published: July 30, 2025, 12:39 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

5.1

CVSS4.0

CVE-2025-8217 - Inert Malicious script injected into Amazon Q Developer Visual Studio Code (VS Code) Extension

The Amazon Q Developer Visual Studio Code (VS Code) extension v1.84.0 contains inert, injected code designed to call the Q Developer CLI. The code executes when the extension is launched within the VS Code environment; however the injected code contains a syntax error which prevents it from making …

πŸ“… Published: July 30, 2025, 12:34 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

7

CVSS3.1

CVE-2025-25011 - Beats Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using the …

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potent…

πŸ“… Published: July 30, 2025, 12:15 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

7

CVSS3.1

CVE-2025-0712 - APM Server Uncontrolled Search Path Element can lead to Local Privilege Escalation (LPE) when using…

An uncontrolled search path element vulnerability can lead to local privilege Escalation (LPE) via Insecure Directory Permissions. The vulnerability arises from improper handling of directory permissions. An attacker with local access may exploit this flaw to move and delete arbitrary files, potent…

πŸ“… Published: July 30, 2025, 12:12 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

6.1

CVSS3.1

CVE-2024-45515 -

An issue was discovered in Zimbra Collaboration (ZCS) through 10.1. A Cross-Site Scripting (XSS) vulnerability exists in Zimbra webmail due to insufficient validation of the content type metadata when importing files into the briefcase. Attackers can exploit this issue by crafting a file with manip…

πŸ“… Published: July 30, 2025, midnight πŸ”„ Last Modified: Aug. 7, 2025, 6:16 p.m.

7.8

CVSS3.1

CVE-2025-50777 -

The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service cred…

πŸ“… Published: July 30, 2025, midnight πŸ”„ Last Modified: Aug. 6, 2025, 4:22 p.m.
Total resulsts: 346828
Page 4228 of 34,683
Β« previous page Β» next page
Filters