SUSE SLES12 Security Update : sudo (SUSE-SU-2021:1273-1)

This update for sudo fixes the following issues : L3: Tenable Scan reports sudo is vulnerable to CVE-2021-3156 bsc1183936 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

HPESBHF04091 rev.1 - HPE Intel 700-DA series Ethernet Controllers, Local Multiple Vulnerabilities

Potential Security Impact: Local: Multiple Vulnerabilities SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Ethernet 10Gb 2-port FLR-SFP+ X710-DA2 Adapter -Prior to Version 10.54.7 HPE Ethernet 10Gb 2-port SFP+ X710-DA2 Adapter -Prior to Version 10.54.7 Intel X710-DA2 Ethernet...

HPESBHF04116 rev.3 - HPE Gen10 and Gen10 Plus Servers, GRUB2 Secure Boot Vulnerability, Local Execution of Arbitrary Code

Potential Security Impact: Local: Execution of Arbitrary Code SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. VMware Upgrade Pack VUP 1.4.1, VUP 1.4.2 - See link to Software Delivery Repository - vibsdepot in Resolution Scripting Toolkit for Linux - Prior to version 11.5121 Apr 20...

HPE Superdome Flex server Denial of Service Vulnerability

HPE Superdome Flex Server is a modular server product from Hewlett Packard Enterprise hpe. A denial of service vulnerability exists in versions prior to HPE Superdome Flex server 3.30.142, which can be exploited by an attacker to cause connections to the BMC web interface to hang...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

Cross site scripting

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

CVE-2021-26582

The CVE-2021-26582 entry concerns HPE IceWall SSO Domain Gateway Option (Dgfw) module versions 10.0 on RHEL 5/6/7, 10.0 on HP-UX 11i v3, and 10.0/11.0 on Windows. The vulnerability is a remote cross-site scripting (XSS) issue, with the underlying details indicating a vulnerable component/function...

CVE-2021-26582

A security vulnerability in HPE IceWall SSO Domain Gateway Option Dgfw module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting XSS...

HPESBGN04086 rev.1 - HPE IceWall SSO Domain Gateway, Remote Cross Site Scripting

Potential Security Impact: Remote: Cross-Site Scripting XSS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. IceWall SSO Dgfw 10.0 RHEL, HP-UX, Windows and 11.0 Windows CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-26582 |...

HPESBST04115 rev.2 - HPE SimpliVity Systems using VMware - Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SimpliVity 2600 - depends on ESXi version see HPE SimpliVity OmniStack Interoperability Guide HPE SimpliVity 2600 Gen10 - depends on ESXi version see HPE SimpliVity OmniStack...

CVE-2021-26580

A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting XSS. HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or...

CVE-2021-26580

A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting XSS. HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or...

CVE-2021-26581

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE h...

CVE-2021-26581

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE h...

Code injection

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE h...

Cross site scripting

A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting XSS. HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or...

CVE-2021-26581

The CVE-2021-26581 issue affects HPE Superdome Flex Server, enabling a network-based denial-of-service that leaves connections to the BMC web interface hung. The root cause and impact are described across multiple sources as affecting the monarch BMC; recovery requires rebooting that BMC. HPE has...

CVE-2021-26581

A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE h...

CVE-2021-26580

A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting XSS. HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or...