42 matches found
CVE-2026-7868 This Power System update is being released to address incorrect authorization
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
CVE-2026-7868
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
CVE-2026-8058 This Power System update is being released to address a sensitive information disclosure
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
EUVD-2026-49885
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
PT-2026-65527
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows ReadOnly users to escalate privileges and give themselves administrator privileges...
PT-2026-65528
IBM OPENBMC FW1110.00 through FW1110.20, and FW1060.00 through FW1060.71 allows a user to supply a password with a resource dump request stores that password into the BMC audit log where an admin user can see it...
CVE-2026-7254
IBM OPENBMC FW1110.00 through FW1110.11 is vulnerable to denial of service attacks by unauthenticated network users...
EUVD-2023-36534
Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...
EUVD-2023-35505
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-31189
Improper authentication in some IntelR Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privilege via local access...
CVE-2023-49144
Out of bounds read in OpenBMC Firmware for some IntelR Server Platforms before versions egs-1.15-0, bhs-0.27 may allow a privileged user to potentially enable information disclosure via local access...
EUVD-2023-39156
Malicious code in bioql PyPI...
EUVD-2023-53151
Malicious code in bioql PyPI...
EUVD-2025-2150
Malicious code in bioql PyPI...
EUVD-2022-38603
Malicious code in bioql PyPI...
EUVD-2022-33832
Malicious code in bioql PyPI...
CVE-2023-32280
Insufficiently protected credentials in some IntelR Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable information disclosure via network access...
CVE-2022-29494
Improper input validation in firmware for OpenBMC in some IntelR platforms before versions egs-0.91-179 and bhs-04-45 may allow an authenticated user to potentially enable denial of service via network access...
CVE-2025-20097
Uncaught exception in OpenBMC Firmware for the IntelR Server M50FCP Family and IntelR Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access...
CVE-2025-20097
Uncaught exception in OpenBMC Firmware for the IntelR Server M50FCP Family and IntelR Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access...