alirezaaminzadeh/cve-riskrank huggingface dataset:
CVE-2023-2041 (published 2023-04-14)
A vulnerability classified as critical was found in novel-plus 3.6.2. Affected by this vulnerability is an unknown functionality of the file /category/list?limit=10&offset=0&order=desc. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225919. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: xxyopen
Affected products: novel-plus
CVE-2023-2042 (published 2023-04-14)
A vulnerability, which was classified as problematic, has been found in DataGear up to 4.7.0/5.1.0. Affected by this issue is some unknown functionality of the component JDBC Server Handler. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-502
Affected vendors: datagear
Affected products: datagear
CVE-2023-2043 (published 2023-04-14)
A vulnerability, which was classified as problematic, was found in Control iD RHiD 23.3.19.0. This affects an unknown part of the file /v2/customerdb/operator.svc/a of the component Edit Handler. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-225921 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: assaabloy
Affected products: control_id_rhid
CVE-2023-2044 (published 2023-04-14)
A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects unknown code of the component Dispositivos Page. The manipulation of the argument IP-DNS leads to cross site scripting. The attack can be initiated remotely. VDB-225922 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: assaabloy
Affected products: control_id_idsecure
CVE-2023-2045 (published 2023-05-24)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ipekyolu Software Auto Damage Tracking Software allows SQL Injection.

This issue affects Auto Damage Tracking Software: before 4.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: ipekyolunet
Affected products: software_auto_damage_tracking_software
CVE-2023-2046 (published 2023-07-10)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Yontem Informatics Vehicle Tracking System allows SQL Injection.

This issue affects Vehicle Tracking System: before 8.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: yontemizleme
Affected products: vehicle_tracking_system
CVE-2023-2047 (published 2023-04-14)
A vulnerability was found in Campcodes Advanced Online Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file login.php. The manipulation of the argument voter leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225932.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-2048 (published 2023-04-14)
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/voters_row.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225933 was assigned to this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-2049 (published 2023-04-14)
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ballot_up.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-225934 is the identifier assigned to this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-2050 (published 2023-04-14)
A vulnerability was found in Campcodes Advanced Online Voting System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225935.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-20509 (published 2024-08-13)
An insufficient DRAM address validation in PMFW may allow a privileged attacker to perform a DMA read from an invalid DRAM address to SRAM, potentially resulting in loss of data integrity.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L)
Weakness: CWE-125
CVE-2023-2051 (published 2023-04-14)
A vulnerability classified as critical has been found in Campcodes Advanced Online Voting System 1.0. Affected is an unknown function of the file /admin/positions_row.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225936.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-20510 (published 2024-08-13)
An insufficient DRAM address validation in PMFW may allow a privileged attacker to read from an invalid DRAM address to SRAM, potentially resulting in data corruption or denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Affected vendors: amd
Affected products: radeon_pro_w6300, radeon_pro_w6400, radeon_pro_w6600, radeon_pro_w6800, radeon_rx_6300m, radeon_rx_6400, radeon_rx_6450m, radeon_rx_6500_xt, radeon_rx_6500m, radeon_rx_6550m, radeon_rx_6550s, radeon_rx_6600, radeon_rx_6600_xt, radeon_rx_6600m, radeon_rx_6600s, radeon_rx_6650_xt, radeon_rx_6650m, radeon_rx_6650m_xt, radeon_rx_6700, radeon_rx_6700_xt, radeon_rx_6700m, radeon_rx_6700s, radeon_rx_6750_gre, radeon_rx_6750_xt, radeon_rx_6800
CVE-2023-20512 (published 2024-08-13)
A hardcoded AES   key in PMFW may result in a privileged attacker gaining access to the key, potentially resulting in internal debug information leakage.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-798
CVE-2023-20513 (published 2024-08-13)
An insufficient bounds check in PMFW (Power Management Firmware) may allow an attacker to utilize a malicious VF (virtualization function) to send a malformed message, potentially resulting in a denial of service.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-787
CVE-2023-20518 (published 2024-08-13)
Incomplete cleanup in the ASP may expose the Master Encryption Key (MEK) to a privileged attacker with access to the BIOS menu or UEFI shell and a memory exfiltration vulnerability, potentially resulting in loss of confidentiality.
Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-459
CVE-2023-20519 (published 2023-11-14)
A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent resulting in a potential loss of guest integrity.













Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-416
Affected vendors: amd
Affected products: genoapi, genoapi_firmware, milanpi, milanpi_firmware
CVE-2023-2052 (published 2023-04-14)
A vulnerability classified as critical was found in Campcodes Advanced Online Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ballot_down.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225937 was assigned to this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-20520 (published 2023-05-09)
Improper access control settings in ASP
Bootloader may allow an attacker to corrupt the return address causing a
stack-based buffer overrun potentially leading to arbitrary code execution.








Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301, epyc_7301_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313
CVE-2023-20521 (published 2023-11-14)
TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading to loss of confidentiality or a denial of service.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H)
Weakness: CWE-367
Affected vendors: amd
Affected products: amd_3015ce, amd_3015ce_firmware, amd_3015e, amd_3015e_firmware, athlon_gold_3150g, athlon_gold_3150g_firmware, athlon_gold_pro_3150g, athlon_gold_pro_3150g_firmware, athlon_gold_pro_3150ge, athlon_gold_pro_3150ge_firmware, athlon_pro_300ge, athlon_pro_300ge_firmware, epyc_7001, epyc_7001_firmware, epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261
CVE-2023-20522 (published 2023-01-11)
Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: milanpi, milanpi_firmware, romepi, romepi_firmware
CVE-2023-20523 (published 2023-01-11)
TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-367
Affected vendors: amd
Affected products: epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343
CVE-2023-20524 (published 2023-05-09)
An attacker with a compromised ASP could
possibly send malformed commands to an ASP on another CPU, resulting in an out
of bounds write, potentially leading to a loss a loss of integrity.








Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Weakness: CWE-787
Affected vendors: amd
Affected products: epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7352, epyc_7352_firmware, epyc_7373x
CVE-2023-20525 (published 2023-01-11)
Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially leading to a denial of service.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343
CVE-2023-20526 (published 2023-11-14)
Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially leading to a loss of confidentiality.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301
CVE-2023-20527 (published 2023-01-11)
Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-service.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301
CVE-2023-20528 (published 2023-01-11)
Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of confidentiality.

Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343
CVE-2023-20529 (published 2023-01-11)
Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: amd
Affected products: epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343
CVE-2023-2053 (published 2023-04-14)
A vulnerability, which was classified as critical, has been found in Campcodes Advanced Online Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/candidates_row.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-225938 is the identifier assigned to this vulnerability.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-20530 (published 2023-01-11)
Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7003, epyc_7003_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p, epyc_7443p_firmware, epyc_7453, epyc_7453_firmware, epyc_74f3, epyc_74f3_firmware, epyc_7513
CVE-2023-20531 (published 2023-01-11)
Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of service.

Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-119
Affected vendors: amd
Affected products: epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343
CVE-2023-20532 (published 2023-01-11)
Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service.

Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Weakness: CWE-20
Affected vendors: amd
Affected products: epyc_7002, epyc_7002_firmware, epyc_7003, epyc_7003_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343
CVE-2023-20533 (published 2023-11-14)
Insufficient DRAM address validation in System
Management Unit (SMU) may allow an attacker to read/write from/to an invalid
DRAM address, potentially resulting in denial-of-service.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: amd
Affected products: epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7303, epyc_7303_firmware, epyc_7303p, epyc_7303p_firmware, epyc_7313
CVE-2023-2054 (published 2023-04-14)
A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /admin/positions_delete.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225939.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-89
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-2055 (published 2023-04-14)
A vulnerability has been found in Campcodes Advanced Online Voting System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /admin/config_save.php. The manipulation of the argument title leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225940.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: campcodes
Affected products: advanced_online_voting_system
CVE-2023-20555 (published 2023-08-08)
Insufficient input validation in
CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting
an arbitrary bit in an attacker-controlled pointer potentially leading to
arbitrary code execution in SMM.
















Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-787
Affected vendors: amd
Affected products: athlon_3015ce, athlon_3015ce_firmware, athlon_3015e, athlon_3015e_firmware, athlon_gold_3150c, athlon_gold_3150c_firmware, athlon_gold_3150g, athlon_gold_3150g_firmware, athlon_gold_3150ge, athlon_gold_3150ge_firmware, athlon_gold_3150u, athlon_gold_3150u_firmware, athlon_gold_pro_3150g, athlon_gold_pro_3150g_firmware, athlon_gold_pro_3150ge, athlon_gold_pro_3150ge_firmware, athlon_pro_300ge, athlon_pro_300ge_firmware, athlon_pro_3045b, athlon_pro_3045b_firmware, athlon_pro_3145b, athlon_pro_3145b_firmware, athlon_silver_3050c, athlon_silver_3050c_firmware, athlon_silver_3050e
CVE-2023-20556 (published 2023-08-08)





Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentially resulting in a Windows crash leading to denial of service.




















Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: amd, linux, microsoft
Affected products: amd_uprof, linux_kernel, windows
CVE-2023-20558 (published 2023-04-02)

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges.


Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-670
Affected vendors: amd
Affected products: athlon_gold_3150u, athlon_gold_3150u_firmware, athlon_silver_3050u, athlon_silver_3050u_firmware, ryzen_3_2200u, ryzen_3_2200u_firmware, ryzen_3_2300u, ryzen_3_2300u_firmware, ryzen_3_3200u, ryzen_3_3200u_firmware, ryzen_3_3250u, ryzen_3_3250u_firmware, ryzen_3_3300u, ryzen_3_3300u_firmware, ryzen_3_3300x, ryzen_3_3300x_firmware, ryzen_3_3350u, ryzen_3_3350u_firmware, ryzen_3_3450u, ryzen_3_3450u_firmware, ryzen_3_3500c, ryzen_3_3500c_firmware, ryzen_3_3500u, ryzen_3_3500u_firmware, ryzen_3_3550h
CVE-2023-20559 (published 2023-04-02)



Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges.




Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-691
Affected vendors: amd
Affected products: athlon_gold_3150u, athlon_gold_3150u_firmware, athlon_silver_3050u, athlon_silver_3050u_firmware, ryzen_3_2200u, ryzen_3_2200u_firmware, ryzen_3_2300u, ryzen_3_2300u_firmware, ryzen_3_3200u, ryzen_3_3200u_firmware, ryzen_3_3250u, ryzen_3_3250u_firmware, ryzen_3_3300u, ryzen_3_3300u_firmware, ryzen_3_3300x, ryzen_3_3300x_firmware, ryzen_3_3350u, ryzen_3_3350u_firmware, ryzen_3_3450u, ryzen_3_3450u_firmware, ryzen_3_3500c, ryzen_3_3500c_firmware, ryzen_3_3500u, ryzen_3_3500u_firmware, ryzen_3_3550h
CVE-2023-2056 (published 2023-04-14)
A vulnerability was found in DedeCMS up to 5.7.87 and classified as critical. This issue affects the function GetSystemFile of the file module_main.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-225941 was assigned to this vulnerability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-94
Affected vendors: dedecms
Affected products: dedecms
CVE-2023-20560 (published 2023-08-15)









Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may allow a privileged attacker to provide a null value potentially resulting in a Windows crash leading to denial of service.











Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Weakness: CWE-20
Affected vendors: amd, microsoft
Affected products: ryzen_master, ryzen_master_monitoring_sdk, windows_10, windows_11
CVE-2023-20561 (published 2023-08-08)







Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service.






















Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Affected vendors: amd, linux, microsoft
Affected products: amd_uprof, linux_kernel, windows
CVE-2023-20562 (published 2023-08-08)



Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially leading to arbitrary kernel execution.


















Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: amd, linux, microsoft
Affected products: amd_uprof, linux_kernel, windows
CVE-2023-20563 (published 2023-11-14)
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.









Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: amd
Affected products: ryzen_3_5100, ryzen_3_5100_firmware, ryzen_3_5125c, ryzen_3_5125c_firmware, ryzen_3_5300g, ryzen_3_5300g_firmware, ryzen_3_5300ge, ryzen_3_5300ge_firmware, ryzen_3_5400u, ryzen_3_5400u_firmware, ryzen_3_5425u, ryzen_3_5425u_firmware, ryzen_3_7335u, ryzen_3_7335u_firmware, ryzen_3_pro_7330u, ryzen_3_pro_7330u_firmware, ryzen_3_pro_7440u, ryzen_3_pro_7440u_firmware, ryzen_5_5500, ryzen_5_5500_firmware, ryzen_5_5500h, ryzen_5_5500h_firmware, ryzen_5_5560u, ryzen_5_5560u_firmware, ryzen_5_5600g
CVE-2023-20564 (published 2023-08-15)







Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD Ryzen™ Master may permit a privileged attacker to perform memory reads/writes potentially leading to a loss of confidentiality or arbitrary kernel execution.












Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-20
Affected vendors: amd, microsoft
Affected products: ryzen_master, ryzen_master_monitoring_sdk, windows_10, windows_11
CVE-2023-20565 (published 2023-11-14)
Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access.









Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: amd
Affected products: ryzen_3_5100, ryzen_3_5100_firmware, ryzen_3_5125c, ryzen_3_5125c_firmware, ryzen_3_5300g, ryzen_3_5300g_firmware, ryzen_3_5300ge, ryzen_3_5300ge_firmware, ryzen_3_5400u, ryzen_3_5400u_firmware, ryzen_3_5425u, ryzen_3_5425u_firmware, ryzen_3_7335u, ryzen_3_7335u_firmware, ryzen_3_pro_7330u, ryzen_3_pro_7330u_firmware, ryzen_3_pro_7440u, ryzen_3_pro_7440u_firmware, ryzen_5_5500, ryzen_5_5500_firmware, ryzen_5_5500h, ryzen_5_5500h_firmware, ryzen_5_5560u, ryzen_5_5560u_firmware, ryzen_5_5600g
CVE-2023-20566 (published 2023-11-14)
Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.
Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: amd
Affected products: epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7303, epyc_7303_firmware, epyc_7303p, epyc_7303p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p
CVE-2023-20567 (published 2023-11-14)
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.exe without validating the file signature potentially leading to arbitrary code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: amd, intel
Affected products: core_i5-8305g, core_i7-8705g, core_i7-8706g, core_i7-8709g, nuc_8_enthusiast_nuc8i7hnkqc, nuc_8_enthusiast_nuc8i7hvkva, nuc_8_enthusiast_nuc8i7hvkvaw, nuc_kit_nuc8i7hnk, nuc_kit_nuc8i7hvk, radeon_pro_vega_56, radeon_pro_vega_56_firmware, radeon_pro_vega_64, radeon_pro_vega_64_firmware, radeon_pro_w5500, radeon_pro_w5500x, radeon_pro_w5700, radeon_pro_w5700x, radeon_pro_w6300, radeon_pro_w6300m, radeon_pro_w6400, radeon_pro_w6500m, radeon_pro_w6600, radeon_pro_w6600m, radeon_pro_w6600x, radeon_pro_w6800
CVE-2023-20568 (published 2023-11-14)
Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe without validating the file signature potentially leading to arbitrary code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-347
Affected vendors: amd, intel
Affected products: core_i5-8305g, core_i7-8705g, core_i7-8706g, core_i7-8709g, nuc_8_enthusiast_nuc8i7hnkqc, nuc_8_enthusiast_nuc8i7hvkva, nuc_8_enthusiast_nuc8i7hvkvaw, nuc_kit_nuc8i7hnk, nuc_kit_nuc8i7hvk, radeon_pro_vega_56, radeon_pro_vega_56_firmware, radeon_pro_vega_64, radeon_pro_vega_64_firmware, radeon_pro_w5500, radeon_pro_w5500x, radeon_pro_w5700, radeon_pro_w5700x, radeon_pro_w6300, radeon_pro_w6300m, radeon_pro_w6400, radeon_pro_w6500m, radeon_pro_w6600, radeon_pro_w6600m, radeon_pro_w6600x, radeon_pro_w6800
CVE-2023-20569 (published 2023-08-08)



A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execution at an attacker-controlled address, potentially leading to information disclosure.




















Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: amd, debian, fedoraproject, microsoft
Affected products: debian_linux, epyc_72f3, epyc_72f3_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p, epyc_7443p_firmware, epyc_7453, epyc_7453_firmware, epyc_7473x, epyc_7473x_firmware, epyc_74f3, epyc_74f3_firmware
CVE-2023-2057 (published 2023-04-14)
A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=edit of the component New Picture Handler. The manipulation of the argument litpic_loca leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-225942 is the identifier assigned to this vulnerability.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: eyoucms
Affected products: eyoucms
CVE-2023-20570 (published 2024-02-13)
Insufficient verification of data authenticity in
the configuration state machine may allow a local attacker to potentially load
arbitrary bitstreams.






Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)
Weakness: CWE-345
Affected vendors: amd
Affected products: alveo_u200, alveo_u200_firmware, alveo_u250, alveo_u250_firmware, alveo_u280, alveo_u280_firmware, alveo_u50, alveo_u50_firmware, artix_ultrascale\+_au10p, artix_ultrascale\+_au10p_firmware, artix_ultrascale\+_au15p, artix_ultrascale\+_au15p_firmware, artix_ultrascale\+_au20p, artix_ultrascale\+_au20p_firmware, artix_ultrascale\+_au25p, artix_ultrascale\+_au25p_firmware, artix_ultrascale\+_au7p, artix_ultrascale\+_au7p_firmware, kintex_ultrascale\+_ku11p, kintex_ultrascale\+_ku11p_firmware, kintex_ultrascale\+_ku13p, kintex_ultrascale\+_ku13p_firmware, kintex_ultrascale\+_ku15p, kintex_ultrascale\+_ku15p_firmware, kintex_ultrascale\+_ku19p
CVE-2023-20571 (published 2023-11-14)
A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation.









Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-362
Affected vendors: amd
Affected products: ryzen_3_5100, ryzen_3_5100_firmware, ryzen_3_5125c, ryzen_3_5125c_firmware, ryzen_3_5300g, ryzen_3_5300g_firmware, ryzen_3_5300ge, ryzen_3_5300ge_firmware, ryzen_3_5400u, ryzen_3_5400u_firmware, ryzen_3_5425u, ryzen_3_5425u_firmware, ryzen_3_7335u, ryzen_3_7335u_firmware, ryzen_3_pro_7330u, ryzen_3_pro_7330u_firmware, ryzen_3_pro_7440u, ryzen_3_pro_7440u_firmware, ryzen_5_5500, ryzen_5_5500_firmware, ryzen_5_5500h, ryzen_5_5500h_firmware, ryzen_5_5560u, ryzen_5_5560u_firmware, ryzen_5_5600g
CVE-2023-20573 (published 2024-01-11)
A privileged attacker
can prevent delivery of debug exceptions to SEV-SNP guests potentially
resulting in guests not receiving expected debug information.




Severity: LOW (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N)
Weakness: CWE-693
Affected vendors: amd
Affected products: epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7303, epyc_7303_firmware, epyc_7303p, epyc_7303p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p
CVE-2023-20575 (published 2023-07-11)

A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a program’s execution inside an AMD SEV VM potentially resulting in a leak of sensitive information.










Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: amd
Affected products: epyc_5552, epyc_5552_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301, epyc_7301_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p
CVE-2023-20578 (published 2024-08-13)
A TOCTOU (Time-Of-Check-Time-Of-Use) in SMM may allow
an attacker with ring0 privileges and access to the
BIOS menu or UEFI shell to modify the communications buffer potentially
resulting in arbitrary code execution.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-367
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301
CVE-2023-20579 (published 2024-02-13)
Improper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel mode) privileged access to bypass protections potentially resulting in
loss of integrity and availability.





















Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H)
Weakness: CWE-284
Affected vendors: amd
Affected products: ryzen_3_3200u, ryzen_3_3200u_firmware, ryzen_3_3250c, ryzen_3_3250c_firmware, ryzen_3_3250u, ryzen_3_3250u_firmware, ryzen_3_3300u, ryzen_3_3300u_firmware, ryzen_3_3350u, ryzen_3_3350u_firmware, ryzen_3_4300g, ryzen_3_4300g_firmware, ryzen_3_4300ge, ryzen_3_4300ge_firmware, ryzen_3_4300u, ryzen_3_4300u_firmware, ryzen_3_5125c, ryzen_3_5125c_firmware, ryzen_3_5300g, ryzen_3_5300g_firmware, ryzen_3_5300ge, ryzen_3_5300ge_firmware, ryzen_3_5400u, ryzen_3_5400u_firmware, ryzen_3_5425c
CVE-2023-2058 (published 2023-04-14)
A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /yxcms/index.php?r=admin/extendfield/mesedit&tabid=12&id=4 of the component HTTP POST Request Handler. The manipulation of the argument web_ico leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-225943.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)
Weakness: CWE-79
Affected vendors: eyoucms
Affected products: eyoucms
CVE-2023-20583 (published 2023-08-01)
A potential power side-channel vulnerability in
AMD processors may allow an authenticated attacker to monitor the CPU power
consumption as the data in a cache line changes over time potentially resulting
in a leak of sensitive information.














Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-203
Affected vendors: amd
Affected products: *
CVE-2023-20584 (published 2024-08-13)
IOMMU improperly handles certain special address
ranges with invalid device table entries (DTEs), which may allow an attacker
with privileges and a compromised Hypervisor to
induce DTE faults to bypass RMP checks in SEV-SNP, potentially leading to a
loss of guest integrity.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N)
Affected vendors: amd
Affected products: epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7303, epyc_7303_firmware, epyc_7303p, epyc_7303p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p
CVE-2023-20586 (published 2023-08-08)

A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edition falls outside of the security support lifecycle and AMD does not plan to release any mitigations
















Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: amd
Affected products: radeon_software
CVE-2023-20587 (published 2024-02-13)
Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.

















Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)
Weakness: CWE-284
CVE-2023-20588 (published 2023-08-08)

A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. 








Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-369
Affected vendors: amd, debian, fedoraproject, microsoft, xen
Affected products: athlon_gold_3150g, athlon_gold_3150g_firmware, athlon_gold_3150ge, athlon_gold_3150ge_firmware, athlon_gold_pro_3150g, athlon_gold_pro_3150g_firmware, athlon_gold_pro_3150ge, athlon_gold_pro_3150ge_firmware, athlon_pro_300ge, athlon_pro_300ge_firmware, athlon_silver_3050ge, athlon_silver_3050ge_firmware, athlon_silver_pro_3125ge, athlon_silver_pro_3125ge_firmware, debian_linux, epyc_7251, epyc_7251_firmware, epyc_7261, epyc_7261_firmware, epyc_7281, epyc_7281_firmware, epyc_7301, epyc_7301_firmware, epyc_7351, epyc_7351_firmware
CVE-2023-20589 (published 2023-08-08)

An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromise of the ASP secure boot potentially leading to arbitrary code execution. 


















Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: amd
Affected products: 4700s, 4700s_firmware, athlon_gold_3150c, athlon_gold_3150c_firmware, athlon_gold_3150g, athlon_gold_3150g_firmware, athlon_gold_3150ge, athlon_gold_3150ge_firmware, athlon_gold_3150u, athlon_gold_3150u_firmware, athlon_gold_pro_3150g, athlon_gold_pro_3150g_firmware, athlon_gold_pro_3150ge, athlon_gold_pro_3150ge_firmware, athlon_pro_300ge, athlon_pro_300ge_firmware, athlon_pro_3045b, athlon_pro_3045b_firmware, athlon_pro_3145b, athlon_pro_3145b_firmware, athlon_silver_3050c, athlon_silver_3050c_firmware, athlon_silver_3050e, athlon_silver_3050e_firmware, athlon_silver_3050u
CVE-2023-2059 (published 2023-04-14)
A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/select_templets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-225944.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
Weakness: CWE-28
Affected vendors: dedecms
Affected products: dedecms
CVE-2023-20591 (published 2024-08-13)
Improper re-initialization of IOMMU during the DRTM event
may permit an untrusted platform configuration to persist, allowing an attacker
to read or modify hypervisor memory, potentially resulting in loss of
confidentiality, integrity, and availability.
Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Weakness: CWE-665
Affected vendors: amd
Affected products: epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7303, epyc_7303_firmware, epyc_7303p, epyc_7303p_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p
CVE-2023-20592 (published 2023-11-14)
Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back behavior of the CPU leading to a potential loss of guest virtual machine (VM) memory integrity.













Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
Affected vendors: amd
Affected products: epyc_7001, epyc_7001_firmware, epyc_7203, epyc_7203_firmware, epyc_7203p, epyc_7203p_firmware, epyc_7232p, epyc_7232p_firmware, epyc_7251, epyc_7251_firmware, epyc_7252, epyc_7252_firmware, epyc_7261, epyc_7261_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7281, epyc_7281_firmware, epyc_7282, epyc_7282_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7301
CVE-2023-20593 (published 2023-07-24)
An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-209
Affected vendors: amd, debian, xen
Affected products: athlon_gold_7220u, athlon_gold_7220u_firmware, debian_linux, epyc_7232p, epyc_7232p_firmware, epyc_7252, epyc_7252_firmware, epyc_7262, epyc_7262_firmware, epyc_7272, epyc_7272_firmware, epyc_7282, epyc_7282_firmware, epyc_7302, epyc_7302_firmware, epyc_7302p, epyc_7302p_firmware, epyc_7352, epyc_7352_firmware, epyc_7402, epyc_7402_firmware, epyc_7402p, epyc_7402p_firmware, epyc_7452, epyc_7452_firmware
CVE-2023-20594 (published 2023-09-20)
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-824
Affected vendors: amd
Affected products: epyc_7003, epyc_7003_firmware, epyc_72f3, epyc_72f3_firmware, epyc_7313, epyc_7313_firmware, epyc_7313p, epyc_7313p_firmware, epyc_7343, epyc_7343_firmware, epyc_7373x, epyc_7373x_firmware, epyc_73f3, epyc_73f3_firmware, epyc_7413, epyc_7413_firmware, epyc_7443, epyc_7443_firmware, epyc_7443p, epyc_7443p_firmware, epyc_7453, epyc_7453_firmware, epyc_74f3, epyc_74f3_firmware, epyc_7513
CVE-2023-20596 (published 2023-11-14)
Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution.









Severity: CRITICAL (CVSS 3.1 vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Affected vendors: amd
Affected products: ryzen_3_5125c, ryzen_3_5125c_firmware, ryzen_3_5300g, ryzen_3_5300g_firmware, ryzen_3_5300ge, ryzen_3_5300ge_firmware, ryzen_3_5400u, ryzen_3_5400u_firmware, ryzen_3_5425u, ryzen_3_5425u_firmware, ryzen_3_7335u, ryzen_3_7335u_firmware, ryzen_3_7440u, ryzen_3_7440u_firmware, ryzen_5_5500h, ryzen_5_5500h_firmware, ryzen_5_5560u, ryzen_5_5560u_firmware, ryzen_5_5600g, ryzen_5_5600g_firmware, ryzen_5_5600ge, ryzen_5_5600ge_firmware, ryzen_5_5600h, ryzen_5_5600h_firmware, ryzen_5_5600hs
CVE-2023-20597 (published 2023-09-20)
Improper initialization of variables in the DXE driver may allow a privileged user to leak sensitive information via local access.
Severity: MEDIUM (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
Weakness: CWE-824
Affected vendors: amd
Affected products: ryzen_3100, ryzen_3100_firmware, ryzen_3300x, ryzen_3300x_firmware, ryzen_3500, ryzen_3500_firmware, ryzen_3500x, ryzen_3500x_firmware, ryzen_3600, ryzen_3600_firmware, ryzen_3600x, ryzen_3600x_firmware, ryzen_3600xt, ryzen_3600xt_firmware, ryzen_3800x, ryzen_3800x_firmware, ryzen_3800xt, ryzen_3800xt_firmware, ryzen_3900, ryzen_3900_firmware, ryzen_3900x, ryzen_3900x_firmware, ryzen_3900xt, ryzen_3900xt_firmware, ryzen_3945wx
CVE-2023-20598 (published 2023-10-17)



An improper privilege management in the AMD Radeon™ Graphics driver may allow an authenticated attacker to craft an IOCTL request to gain I/O control over arbitrary hardware ports or physical addresses resulting in a potential arbitrary code execution.




Severity: HIGH (CVSS 3.1 vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Weakness: CWE-269
Affected vendors: amd
Affected products: radeon_pro_w5500, radeon_pro_w5700, radeon_pro_w6300, radeon_pro_w6400, radeon_pro_w6600, radeon_pro_w6800, radeon_pro_w7500, radeon_pro_w7600, radeon_pro_w7800, radeon_pro_w7900, radeon_rx_5300, radeon_rx_5300_xt, radeon_rx_5300m, radeon_rx_5500, radeon_rx_5500_xt, radeon_rx_5500m, radeon_rx_5600, radeon_rx_5600_xt, radeon_rx_5600m, radeon_rx_5700, radeon_rx_5700_xt, radeon_rx_5700m, radeon_rx_6300m, radeon_rx_6400, radeon_rx_6450m