Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7The affected products are vulnerable to an uncaught exception that could allow an unauthenticated attacker to remotely crash core PI services resulting in a denial-of-service.Check if you run itEPSS 0.34%Feb 10, 2026
- Medium5.7The vulnerability, if exploited, could allow an attacker with Event Log Reader (S-1-5-32-573) privileges to obtain proxy details, including URL and proxy credentials, from the PI tCheck if you run itEPSS 0.13%Feb 10, 2026
- Medium4.6Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.Check if you run itEPSS 0.22%Feb 10, 2026
- Low2.9A vulnerability in GE Vernova Enervista UR Setup on Windows allows File Manipulation.This issue affects Enervista: 8.6 and prior versions.Check if you run itEPSS 0.25%Feb 10, 2026
- High7.3A buffer overflow in the AMD Secure Processor (ASP) bootloader could allow an attacker to overwrite memory, potentially resulting in privilege escalation and arbitrary code executiCheck if you run itEPSS 0.15%Feb 10, 2026
- Medium4.6A Time-of-check time-of-use (TOCTOU) race condition in the SMM communications buffer could allow a privileged attacker to bypass input validation and perform an out of bounds readCheck if you run itEPSS 0.14%Feb 10, 2026
- Medium5.4Insufficient parameter sanitization in AMD Secure Processor (ASP) Boot Loader could allow an attacker with access to SPIROM upgrade to overwrite the memory, potentially resulting iCheck if you run itEPSS 0.15%Feb 10, 2026
- Low1.8Improper syscall input validation in ASP (AMD Secure Processor) may force the kernel into reading syscall parameter values from its own memory space allowing an attacker to infer tCheck if you run itEPSS 0.16%Feb 10, 2026
- High7.1Improper system call parameter validation in the Trusted OS may allow a malicious driver to perform mapping or unmapping operations on a large number of pages, potentially resultinCheck if you run itEPSS 0.16%Feb 10, 2026
- Medium4.8Insufficient input parameter sanitization in AMD Secure Processor (ASP) Boot Loader (legacy recovery mode only) could allow an attacker to write out-of-bounds to corrupt Secure DRACheck if you run itEPSS 0.16%Feb 10, 2026
- High7.0Improper input validation in the SMM handler could allow an attacker with Ring0 access to write to SMRAM and modify execution flow for S3 (sleep) wake up, potentially resulting inCheck if you run itEPSS 0.17%Feb 10, 2026
- Medium4.6Improper input validation in the SMM communications buffer could allow a privileged attacker to perform an out of bounds read or write to SMRAM potentially resulting in loss of conCheck if you run itEPSS 0.20%Feb 10, 2026
- Medium4.5Insufficient or Incomplete Data Removal in Hardware Component in SEV firmware doesn't fully flush IOMMU.Check if you run itEPSS 0.16%Feb 10, 2026
- Low1.8Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SECheck if you run itEPSS 0.14%Feb 10, 2026
- Medium4.6A use after free in the SEV firmware could allow a malicous hypervisor to activate a migrated guest with the SINGLE_SOCKET policy on a different socket than the migration agent potCheck if you run itEPSS 0.13%Feb 10, 2026
- Medium4.0Insufficient Granularity of Access Control in SEV firmware can allow a privileged attacker to create a SEV-ES Guest to attack SNP guest, potentially resulting in a loss of confidenCheck if you run itEPSS 0.16%Feb 10, 2026
- Medium4.8Improper isolation of shared resources on a system on a chip by a malicious local attacker with high privileges could potentially lead to a partial loss of integrity.Check if you run itEPSS 0.12%Feb 10, 2026
- Low1.8Missing Checks in certain functions related to RMP initialization can allow a local admin privileged attacker to cause misidentification of I/O memory, potentially resulting in a lCheck if you run itEPSS 0.14%Feb 10, 2026
- Medium5.3Improper bound check within AMD CPU microcode can allow a malicious guest to write to host memory, potentially resulting in loss of integrity.Check if you run itEPSS 0.35%Feb 10, 2026
- Medium6.8Improper handling of overlap between the segmented reverse map table (RMP) and system management mode (SMM) memory could allow a privileged attacker corrupt or partially infer SMMCheck if you run itEPSS 0.16%Feb 10, 2026
- Medium6.9Improper access control in secure encrypted virtualization (SEV) could allow a privileged attacker to write to the reverse map page (RMP) during secure nested paging (SNP) initialiCheck if you run itEPSS 0.16%Feb 10, 2026
- Medium5.9Improper input validation in IOMMU could allow a malicious hypervisor to reconfigure IOMMU registers resulting in loss of guest data integrity.Check if you run itEPSS 0.19%Feb 10, 2026
- High7.1Improper input validation in system management mode (SMM) could allow a privileged attacker to overwrite stack memory leading to arbitrary code execution.Check if you run itEPSS 0.16%Feb 10, 2026
- Medium5.9Improper Initialization within the AMD Secure Encrypted Virtualization (SEV) firmware can allow an admin privileged attacker to corrupt RMP covered memory, potentially resulting inCheck if you run itEPSS 0.17%Feb 10, 2026
- Medium6.7Improper Prevention of Lock Bit Modification in SEV firmware could allow a privileged attacker to downgrade firmware potentially resulting in a loss of integrity.Check if you run itEPSS 0.16%Feb 10, 2026
Sort