3802 matches found
Information disclosure
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure...
CVE-2023-31041
An issue was discovered in SysPasswordDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. System password information could optionally be stored in cleartext, which might lead to possible information disclosure...
CVE-2023-27373
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM...
Input validation
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM...
CVE-2023-27373
An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible EFI variable to cause a dynamic BAR setting to overlap SMRAM...
CVE-2023-27373
CVE-2023-27373 affects InsydeH2O BIOS (kernel 5.0–5.5). The issue arises from insufficient input validation, allowing an attacker with local access to tamper with a runtime EFI variable and cause a dynamic BAR setting to overlap SMRAM. Connected advisories confirm this family of vulnerabilities a...
Moderate Photon OS Security Update - PHSA-2023-5.0-0066
Updates of 'go' packages of Photon OS have been released...
CVE-2023-36132
PHP Jabbers Availability Booking Calendar 5.0 is vulnerable to Incorrect Access Control...
Default credentials
PHPJabbers Availability Booking Calendar 5.0 is vulnerable to User Account Takeover through username/password change...
CVE-2023-28468
An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI handler that allows an attacker to interact with the SPI flash at run-time from the OS...
Code injection
An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI handler that allows an attacker to interact with the SPI flash at run-time from the OS...
CVE-2023-4110
Summary: CVE-2023-4110 affects PHP Jabbers Availability Booking Calendar 5.0. The vulnerability is a cross-site scripting flaw in the unknown functionality of /index.php, triggered by manipulating the session_id parameter. The Nuclei template confirms unauthenticated, remote exploitation that can...
CVE-2023-28468
An issue was discovered in FvbServicesRuntimeDxe in Insyde InsydeH2O with kernel 5.0 through 5.5. The FvbServicesRuntimeDxe SMM module exposes an SMI handler that allows an attacker to interact with the SPI flash at run-time from the OS...
CVE-2023-36132
The CVE-2023-36132 entry concerns PHP Jabbers Availability Booking Calendar 5.0 and the underlying issue is Incorrect Access Control. The available connected sources collectively identify the affected software (Availability Booking Calendar 5.0) and the root cause as improper access control, with...
CMSdosma 5.0 Insecure Direct Object Reference
==================================================================================================================================== | Title : CMSdosma v5.0 Unauthorized Administrative Access Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefo...
Important Photon OS Security Update - PHSA-2023-5.0-0061
Updates of 'libwebp' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2023-5.0-91-0059
Updates of 'linux-esx', 'linux', 'pcre2', 'wireshark', 'linux-secure', 'linux-rt' packages of Photon OS have been released...
Important Photon OS Security Update - PHSA-2023-5.0-0059
Updates of 'linux', 'wireshark', 'linux-secure', 'linux-esx', 'linux-rt', 'pcre2' packages of Photon OS have been released...
Security Bulletin: IBM App Connect Enterprise Certified Container operands are vulnerable to privilege elevation due to [CVE-2023-26604]
Summary systemd is not used directly by IBM App Connect Enterprise Certified Container but is in the images as part of the base operating system. IBM App Connect Enterprise Certified Container operands are vulnerable to privilege elevation. This bulletin provides patch information to address the...