Lucene search
+L

558 matches found

CNVD
CNVD
added 2024/04/16 12:0 a.m.9 views

Dell Storage Resource Manager Resource Management Error Vulnerability

Dell Storage Resource Manager is a software for managing storage resources from Dell USA. A resource management error vulnerability exists in Dell Storage Resource Manager version 4.9.0.0 and earlier, which stems from the presence of session fixation and can be exploited by an unauthenticated...

6.5CVSS6.8AI score0.00399EPSS
Exploits0References1
NVD
NVD
added 2024/04/12 5:17 p.m.25 views

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

6.5CVSS5.7AI score0.00399EPSS
Exploits0References1
CVE
CVE
added 2024/04/12 4:59 p.m.70 views

CVE-2024-0157

Dell Storage Resource Manager (SRM) for Windows includes a Session Fixation vulnerability in the SRM Windows Host Agent affecting version 4.9.0.0 and earlier. An unauthenticated attacker on an adjacent network could potentially hijack a targeted user’s application session. Public details in conne...

6.5CVSS6.8AI score0.00399EPSS
Exploits0References1Affected Software2
Vulnrichment
Vulnrichment
added 2024/04/12 4:59 p.m.12 views

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

5.9CVSS6.9AI score0.00399EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/04/12 4:59 p.m.29 views

CVE-2024-0157

Dell Storage Resource Manager, 4.9.0.0 and below, contains a Session Fixation Vulnerability in SRM Windows Host Agent. An adjacent network unauthenticated attacker could potentially exploit this vulnerability, leading to the hijack of a targeted user's application session...

5.9CVSS5.9AI score0.00399EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/04/12 12:0 a.m.6 views

Dell Storage Resource Manager 资源管理错误漏洞

Dell Storage Resource Manager is a software for managing storage resources from Dell USA. A resource management error vulnerability exists in Dell Storage Resource Manager version 4.9.0.0 and earlier, which stems from the presence of session fixation and can be exploited by an unauthenticated...

6.5CVSS6.8AI score0.00399EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2024/04/12 12:0 a.m.9 views

PT-2024-5633 · Dell · Dell Storage Resource Manager

Name of the Vulnerable Software and Affected Versions: Dell Storage Resource Manager version 4.9.0.0 and below Description: The issue is related to a session fixation problem in the SRM Windows Host Agent. An unauthenticated attacker on an adjacent network could exploit this, potentially leading ...

6.5CVSS7.2AI score0.00399EPSS
Exploits0References3
OSV
OSV
added 2024/03/06 11:5 a.m.23 views

BIT-SPARK-2020-9480

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication spark.authenticate via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even...

9.8CVSS9.5AI score0.26793EPSS
Exploits0References7
IBM Security Bulletins
IBM Security Bulletins
added 2024/01/29 7:11 p.m.16 views

Security Bulletin:  IBM Content Manager Enterprise Edition Resource Manager is affected by a Remote Code Execution Cross-site Scripting vulnerability

Summary IBM Content Manager Enterprise Edition Resource Manager has addressed the following vulnerability Vulnerability Details CVEID: CVE-2018-1502 DESCRIPTION: IBM Content Manager Enterprise Edition Resource Manager is vulnerable to cross-site scripting. This vulnerability allows users to embed...

5.4CVSS5.3AI score0.00968EPSS
Exploits0Affected Software1
OSV
OSV
added 2024/01/20 2:15 a.m.5 views

CVE-2023-51924

An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface of YonBIP v323.05 allows attackers to execute arbitrary code via uploading a crafted file...

9.8CVSS6.1AI score0.00819EPSS
Exploits0References3
OSV
OSV
added 2024/01/20 2:15 a.m.5 views

CVE-2023-51906

An issue in yonyou YonBIP v323.05 allows a remote attacker to execute arbitrary code via a crafted script to the ServiceDispatcherServlet uap.framework.rc.itf.IResourceManager component...

9.8CVSS6.1AI score0.00974EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.5 views

PT-2024-14325

Name of the Vulnerable Software and Affected Versions YonBIP version 3 23.05 Description An arbitrary file upload vulnerability in the uap.framework.rc.itf.IResourceManager interface allows attackers to execute arbitrary code via uploading a crafted file. Recommendations For YonBIP version 3 23.0...

9.8CVSS7.3AI score0.00819EPSS
Exploits0References9
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:0 a.m.9 views

The vulnerability of the Slurm resource manager, related to pointer swapping errors, allows a perpetrator to trigger a service failure.

The vulnerability of the Slurm resource manager is related to pointer dereferencing errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

7.8CVSS7.2AI score0.0111EPSS
Exploits0References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/01/12 12:0 a.m.11 views

The vulnerability of the Slurm resource manager lies in the insufficient implementation of message integrity during transmission to the communication channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks.

The vulnerability of the Slurm resource manager is related to the insufficient implementation of message integrity during transmission through the communication channel. Exploiting this vulnerability allows a malicious actor to modify RPC traffic in such a way that message checksums are bypassed...

7.8CVSS7.1AI score0.00379EPSS
Exploits0References7Affected Software2
NVD
NVD
added 2024/01/02 6:15 a.m.31 views

CVE-2023-33113

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments...

8.4CVSS8.5AI score0.00119EPSS
Exploits0References1
Prion
Prion
added 2024/01/02 6:15 a.m.23 views

Memory corruption

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments...

4.3CVSS7.3AI score0.00119EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/01/02 5:38 a.m.34 views

CVE-2023-33113 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments...

8.4CVSS8.6AI score0.00119EPSS
Exploits0References1
CVE
CVE
added 2024/01/02 5:38 a.m.121 views

CVE-2023-33113

CVE-2023-33113 affects Qualcomm kernel, where memory corruption occurs when the resource manager replies to the host kernel with multiple fragments. Public descriptions identify a classic buffer overflow style issue in the kernel component, with CVSS indicating local, low-privilege access and hig...

8.4CVSS7.7AI score0.00119EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/01/02 5:38 a.m.5 views

CVE-2023-33113 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel

Memory corruption when resource manager sends the host kernel a reply message with multiple fragments...

8.4CVSS7.3AI score0.00119EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/01/02 12:0 a.m.7 views

Qualcomm Chipsets Security Vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when the resource manager sends a reply message containing multiple fragments to the host kernel...

8.4CVSS6.9AI score0.00119EPSS
Exploits0References3
Rows per page
Query Builder