CVE-2023-40286

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40287

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40290: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue that affects Internet Explorer 11 on Windows...

CVE-2023-40286: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40289: Improper Privilege Management

A command injection issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker can exploit this to elevate privileges from a user with BMC administrative privileges...

CVE-2023-40284

The Supermicro X11 series (specifically models X11SSM-F , X11SAE-F , and X11SSE-F ) version 1.66 is vulnerable to a Cross-Site Scripting (XSS) attack. The root cause is a lack of sufficient protection for the web page structure within the BMC IPMI web interface, which can be triggered by a specia...

Supermicro X11 安全漏洞

The Supermicro X11 is a server motherboard from American Supermicro Computer Supermicro. A security vulnerability exists in Supermicro X11SSM-F, X11SAE-F, X11SSE-F version 1.66. An attacker could exploit this vulnerability to elevate the privileges of a user with BMC administrative privileges...

CVE-2023-40287: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40288: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

Supermicro X11 安全漏洞

The Supermicro X11 is a server motherboard from American Supermicro Computer Supermicro. A security vulnerability exists in Supermicro X11SSM-F, X11SAE-F, X11SSE-F version 1.66. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-40285

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40287

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40286

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40286

The Supermicro X11SSM-F , X11SAE-F , and X11SSE-F (version 1.66) devices are vulnerable to a Cross-Site Scripting (XSS) issue caused by a lack of protective measures for the web page structure in the BMC IPMI web interface. An attacker can exploit this vulnerability to perform XSS attacks, which ...

Supermicro X11 安全漏洞

The Supermicro X11 is a server motherboard from American Supermicro Computer Supermicro. A security vulnerability exists in Supermicro X11SSM-F, X11SAE-F, X11SSE-F version 1.66. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Supermicro X11 安全漏洞

The Supermicro X11 is a server motherboard from American Supermicro Computer Supermicro. A security vulnerability exists in Supermicro X11SSM-F, X11SAE-F, X11SSE-F version 1.66. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-40284: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

CVE-2023-40285: Improper Neutralization of Input During Web Page Generation

An issue was discovered on Supermicro X11SSM-F, X11SAE-F, and X11SSE-F 1.66 devices. An attacker could exploit an XSS issue...

Drones and the US Air Force

Fascinating analysis of the use of drones on a modern battlefield--that is, Ukraine--and the inability of the US Air Force to react to this change. The F-35A certainly remains an important platform for high-intensity conventional warfare. But the Air Force is planning to buy 1,763 of the aircraft...

Access Control Password Disclosure

The vulnerability of the microprogramming software in the terminal measurement system of the F-logic DataCube3 power generation system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to obtain the passwords for the root and...