1138 matches found
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in freetype2 (CVE-2016-10328)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in freetype2. Vulnerability Details CVEID: CVE-2016-10328 DESCRIPTION: Freetype 2 is vulnerable to a heap-based buffer overflow, caused by an out-of-bounds write related to the cffparserrun function i...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by vulnerabilities in php
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in php. Vulnerability Details CVEID: CVE-2018-7584 DESCRIPTION: PHP is vulnerable to a stack-based buffer overflow, caused by improper bounds checking by the phpstreamurlwraphttpex function in...
F5 BIG-IP Denial of Service Vulnerability (CNVD-2018-21232)
F5 BIG-IP is an all-in-one network device from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A security vulnerability exists in the F5 BIG-IP. A remote attacker can exploit this vulnerability to cause a denial of service wh...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in ncurses (CVE-2017-13733)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in ncurses. Vulnerability Details CVEID: CVE-2017-13733 DESCRIPTION: Ncurses is vulnerable to a denial of service, caused by an illegal address access in the fmtentry function in progs/dumpentry.c. By...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerability in dhcp (CVE-2017-3144)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerability in dhcp. Vulnerability Details CVEID: CVE-2017-3144 DESCRIPTION: ISC DHCP is vulnerable to a denial of service, caused by the failure to properly clean up closed OMAPI connections. A remote attacker...
Security Bulletin: IBM BladeCenter Advanced Management Module (AMM) is affected by a vulnerabilities in freetype2 (CVE-2016-10244 CVE-2017-8105 CVE-2017-8287)
Summary IBM BladeCenter Advanced Management Module AMM has addressed the following vulnerabilities in freetype2. Vulnerability Details CVEID: CVE-2017-8287 DESCRIPTION: Freetype2 is vulnerable to a denial of service, caused by a heap-based buffer overflow in the t1builderclosecontour function in...
CVE-2018-5535
On F5 BIG-IP 14.0.0, 13.0.0-13.1.0, 12.1.0-12.1.3, or 11.5.1-11.6.3 specifically crafted HTTP responses, when processed by a Virtual Server with an associated QoE profile that has Video enabled, may cause TMM to incorrectly buffer response data causing the TMM to restart resulting in a Denial of...
PT-2018-19353
Уязвимость модуля управления HTTPS программного обеспечения коммутатора Belden Hirschmann HiOS и Belden Hirschmann HiSecOS связана с ошибками обработки запросов на аутентификацию. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к...
IMM2 Information Disclosure Vulnerability in Multiple IBM Products
IBM Flex System x220 Compute Node and others are different series of server devices from IBM Corporation in the U.S. Integrated Management Module II IMM2 is one of the integrated management modules. A security vulnerability exists in IMM2 in several IBM products. A remote attacker could exploit...
PT-2018-4127
Name of the Vulnerable Software and Affected Versions Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems affected versions not specified Description The issue allows remote authenticated users to obtain sensitive account information vi...
CVE-2014-0882: Exposure of Sensitive Information to an Unauthorized Actor
Integrated Management Module II IMM2 on IBM Flex System, NeXtScale, System x3xxx, and System x iDataPlex systems might allow remote authenticated users to obtain sensitive account information via vectors related to generated Service Advisor data FFDC. IBM X-Force ID: 91149...
PT-2018-4126
Name of the Vulnerable Software and Affected Versions IBM Flex System x222 servers with firmware versions 1.00 through 3.56 Description The issue allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration of the Trusted Platfo...
CVE-2014-0881: Improper Access Control
The TPM on Integrated Management Module II IMM2 on IBM Flex System x222 servers with firmware 1.00 through 3.56 allows remote attackers to obtain sensitive key information or cause a denial of service by leveraging an incorrect configuration. IBM X-Force ID: 91146...
CVE-2017-3774
A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...
PT-2018-7266
Name of the Vulnerable Software and Affected Versions: Integrated Management Module 2 IMM2 versions earlier than 4.70 Integrated Management Module 2 IMM2 versions earlier than 6.60 Description: A stack overflow issue was found in the web administration service. It can be triggered by providing a...
CVE-2017-3774: Improper Restriction of Operations within the Bounds of a Memory Buffer
A stack overflow vulnerability was discovered within the web administration service in Integrated Management Module 2 IMM2 earlier than version 4.70 used in some Lenovo servers and earlier than version 6.60 used in some IBM servers. An attacker providing a crafted user ID and password combination...
CVE-2014-9989
CVE-2014-9989 affects Android devices with Qualcomm Snapdragon Mobile and Snapdragon Wear (e.g., MDM9206/9607/9615/9625/9635M, MSM8909W, SD 210/212/205, SD 400/410/12, SD 425/430/600/615/16/SD 415/625/650/52/808/810/450, etc.). The vulnerability is in the USB management module and is triggered by...
CVE-2014-9989: Improper Validation of Array Index
In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9615, MDM9625, MDM9635M, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 625, SD 650/52, SD 808, SD 810, and SD 450, ...
PT-2018-4320
Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level Description The issue arises when an incorrect endpoint number or direction is passed, potentially leading to an out of bounds array access in the USB management module of affected...