HPE System Management Homepage Cross-Site Scripting Vulnerability (CNVD-2017-33360)

HPE System Management Homepage SMH Software is a Web-based interface from Hewlett Packard Enterprise HPE. The interface consolidates and simplifies the process of single-system management of HP servers running HP-UX, Linux, and Microsoft Windows operating systems. A cross-site scripting...

HPE System Management Homepage Arbitrary Command Execution Vulnerability (CNVD-2017-33362)

HPE System Management Homepage is a Web-based interface from Hewlett Packard Enterprise. An arbitrary command execution vulnerability exists in HPE System Management Homepage, which allows an attacker to submit a special request to execute arbitrary OS commands in an application context...

HPE System Management Homepage Denial of Service Vulnerability (CNVD-2017-33369)

HPE System Management Homepage is a Web-based interface from Hewlett Packard Enterprise. A security vulnerability in HPE System Management Homepage allows remote attackers to conduct denial-of-service attacks by submitting special requests using the vulnerability...

HPE System Management Homepage Arbitrary Command Execution Vulnerability

HPE System Management Homepage is a Web-based interface from Hewlett Packard Enterprise. An arbitrary command execution vulnerability exists in HPE System Management Homepage, which allows an attacker to submit a special request to execute arbitrary OS commands in an application context...

HPE System Management Homepage Denial of Service Vulnerability

HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. The interface consolidates and simplifies the process of single-system management of HP servers running HP-UX, Linux, and Microsoft Windows operating systems. A security bypass vulnerability exists in...

HPE System Management Homepage Authentication Bypass Vulnerability

HPE System Management Homepage is a Web-based interface from Hewlett Packard Enterprise. A security vulnerability exists in HPE System Management Homepage that allows an attacker to submit a special request to bypass authentication and gain unauthorized access...

[SECURITY] Fedora 25 Update: ruby-2.3.4-64.fc25

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

RHEL 6 : satellite and spacewalk (RHSA-2017:2645)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:2645 advisory. Spacewalk is an Open Source systems management solution that provides system provisioning, configuration and patching capabilities. Red Hat Satellite...

Moderate: Red Hat Security Advisory: satellite and spacewalk security and bug fix update

An update for satellite-schema, spacewalk-backend, spacewalk-java, and spacewalk-schema is now available for Red Hat Satellite 5.8 and Red Hat Satellite 5.8 ELS. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base...

The vulnerability of the Preboot Policy service of the information system management software ZENworks Configuration Management allows a perpetrator to execute arbitrary code.

The vulnerability of the Preboot Policy service in the information system management software ZENworks Configuration Management ZCM is caused by a buffer overflow in the stack. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

[SECURITY] Fedora 24 Update: ruby-2.3.3-62.fc24

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

[SECURITY] Fedora 25 Update: puppet-4.2.1-5.fc25

Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Important: Red Hat Security Advisory: sudo security update

An update for sudo is now available for Red Hat Enterprise Linux 5 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2017-0616

An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product:...

CVE-2017-0616

CVE-2017-0616 describes an elevation of privilege in the MediaTek system management interrupt driver that could allow a local malicious Android app to execute arbitrary code in the kernel context. Affected product: Android. Impact is rated High, because exploitation requires first compromising a ...

CVE-2017-0616

An elevation of privilege vulnerability in the MediaTek system management interrupt driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product:...

Google Android MediaTek system management interrupt driver elevation of privilege vulnerability

Google Android is a Linux-based operating system for smartphone devices. An elevation of privilege vulnerability exists in the Google Android MMediaTek system management interrupt driver, which can be exploited by a remote attacker to build a malicious application that can be elevated in privileg...

The vulnerability of microprogramming software on motherboards with Intel chips allows a hacker to gain control over the system.

The vulnerability of the SMM driver in the AMI NvmeSmm microprogramming system for motherboards with Intel chipsets relates to errors in the operation of the SMI interrupt handler. Exploiting this vulnerability allows a local attacker to gain full control over the system—by disabling the flash...

The vulnerability of microprogramming software on motherboards with Intel chips allows a hacker to gain control over the system.

The vulnerability of the SMM driver in the AMI USB-Rt microprogramming system for motherboards with Intel chips is related to errors in the operation of the SMI system interrupt handler. Exploiting this vulnerability allows a local attacker to gain full control over the system—by disabling the...