PT-2023-21547 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns an HPE OneView appliance dump that may expose SAN switch administrative credentials. Recommendations: At the moment, there is no information about a newer version tha...

PT-2023-21545 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the exposure of proxy credential settings through an HPE OneView appliance dump. Recommendations: At the moment, there is no information about a newer version that...

CVE-2023-22917

A buffer overflow vulnerability in the “sdwanifaceipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50W firmware versions 5.10 through 5.32, USG20W-VPN firmware versions 5.10 through 5.32, and VPN series firmware...

CVE-2023-22917

A buffer overflow vulnerability in the “sdwanifaceipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50W firmware versions 5.10 through 5.32, USG20W-VPN firmware versions 5.10 through 5.32, and VPN series firmware...

CVE-2023-22917

A buffer overflow vulnerability in the “sdwanifaceipc” binary of Zyxel ATP series firmware versions 5.10 through 5.32, USG FLEX series firmware versions 5.00 through 5.32, USG FLEX 50W firmware versions 5.10 through 5.32, USG20W-VPN firmware versions 5.10 through 5.32, and VPN series firmware...

Zyxel ATP 安全漏洞

The Zyxel ATP is a firewall from China's Hopkins Zyxel. A security vulnerability exists in the Zyxel ATP Series 5.10 through 5.35 firmware versions, USG FLEX Series 5.00 through 5.35 firmware versions, USG FLEX 50W 5.10 through 5.35 firmware versions, USG20W-VPN 5.10 through 5.35 firmware version...

CVE-2023-22917

CVE-2023-22917 is a buffer overflow in Zyxel sdwan_iface_ipc used by Zyxel ATP/USG/FLEX/VPN firmware. The flaw allows a remote unauthenticated attacker to cause a core dump via a crafted configuration file upload, affecting Zyxel products (ATP 5.10–5.32; USG FLEX 5.00–5.32; USG FLEX 50(W) 5.10–5....

CVE-2023-28091

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

CVE-2023-28091

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

CVE-2023-28085

An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...

Design/Logic Flaw

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

CVE-2023-28085

An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...

CVE-2023-28085

An HPE OneView Global Dashboard OVGD appliance dump may expose OVGD user account credentials...

CVE-2023-28085

CVE-2023-28085 relates to HPE OneView Global Dashboard (OVGD). The connected documents indicate that an OVGD appliance dump may expose OVGD user account credentials. Key details from the sources show a local attack vector with low privileges required, and a high confidentiality impact, yielding a...

CVE-2023-28091

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

CVE-2023-28091

HPE OneView virtual appliance "Migrate server hardware" option may expose sensitive information in an HPE OneView support dump...

Kodi Confirms Data Breach: 400K User Records and Private Messages Stolen

Open source media player software provider Kodi has confirmed a data breach after threat actors stole the company's MyBB forum database containing user data and private messages. What's more, the unknown threat actors attempted to sell the data dump comprising 400,635 Kodi users on the now-defunc...

PT-2023-21551 · Hewlett Packard · Hpe Oneview

Name of the Vulnerable Software and Affected Versions: HPE OneView affected versions not specified Description: The issue concerns the exposure of sensitive information in an HPE OneView support dump when using the "Migrate server hardware" option in the HPE OneView virtual appliance...

Hewlett Packard Enterprise OneView Global Dashboard 安全漏洞

Hewlett Packard Enterprise OneView Global Dashboard OVGD is a suite of dashboard solutions from Hewlett Packard Enterprise USA. A security vulnerability exists in Hewlett Packard Enterprise OneView Global Dashboard that stems from a device dump that could expose OVGD user account credentials...

AZL-26138 CVE-2023-30630 affecting package dmidecode for versions less than 3.5-1

Dmidecode before 3.5 allows -dump-bin to overwrite a local file. This has security relevance because, for example, execution of Dmidecode via Sudo is plausible. NOTE: Some third parties have indicated the fix in 3.5 does not adequately address the vulnerability. The argument is that the proposed...