2787 matches found
[SECURITY] Fedora 28 Update: ruby-2.5.1-92.fc28
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
BIOS SMI Handler Input Validation Failures - US
Lenovo Security Advisory: LEN-14695 Potential Impact: Execution of code in System Management Mode by an attacker with local administrative access Severity: High Scope of Impact: Industry-Wide CVE Identifier: CVE-2017-3753 Summary Description: A vulnerability has been identified in some Lenovo...
The vulnerability in the implementation of AMD Secure Processor technology in Ryzen and Ryzen Pro processors allows for the disabling of System Management Mode protection.
The vulnerability of AMD Secure Processor-based Ryzen and Ryzen Pro processors lies in the implementation flaws of security functions. Exploiting this vulnerability allows an attacker with access to the targeted computer and administrative privileges to disable the System Management Mode SMM...
The vulnerability of AMD Secure Processor technology in Ryzen and Ryzen Pro processors allows for reading from the protected area of the processor.
The vulnerability of AMD Secure Processor-based Ryzen and Ryzen Pro processors lies in the implementation flaws of security functions. Exploiting this vulnerability allows an attacker with access to the targeted computer and administrative privileges to read from the protected areas of the...
The vulnerability of the AMD Secure Processor implementation in EPYC Server processors allows for reading from the protected area of the processor.
The vulnerability of the AMD Secure Processor implementation in EPYC Server processors lies in the deficiencies in the implementation of the loader responsible for verifying the functionality of the hardware, as well as for launching the AMD Secure Processor module. Exploiting this vulnerability...
The vulnerability in the implementation of the AMD Secure Processor technology in EPYC Server processors allows for the disabling of System Management Mode protection.
The vulnerability of the AMD Secure Processor implementation in EPYC Server processors lies in the deficiencies in the implementation of the loader responsible for verifying the functionality of the hardware, as well as for launching the AMD Secure Processor module. Exploiting this vulnerability...
[SECURITY] Fedora 28 Update: puppet-4.10.10-1.fc28
Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...
AMD Ryzen and Ryzen Pro Arbitrary Code Execution Vulnerability
AMD Ryzen and Ryzen Pro are both central processing unit CPU products from AMD in the United States. A security vulnerability exists in AMD Ryzen and Ryzen Pro that originates from a program that makes it difficult to perform adequate access control on Secure Processor. An attacker could exploit...
Important: Red Hat Security Advisory: rh-ruby24-ruby security, bug fix, and enhancement update
An update for rh-ruby24-ruby is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerabili...
[SECURITY] Fedora 27 Update: puppet-4.10.10-1.fc27
Puppet lets you centrally manage every important aspect of your system usin g a cross-platform specification language that manages all the separate elements normally aggregated in different files, like users, cron jobs, and hosts, along with obviously discrete elements like packages, services, an...
Solaris 10 (x86) : 145334-33
Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: System management. Supported versions that are affected are 3.3 and 4.1. Easily exploitable vulnerability allows successful authenticated network attacks via TCP/IP. Successful attack of this...
Solaris 10 (x86) : 145334-34
Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: System management. Supported versions that are affected are 3.3 and 4.1. Easily exploitable vulnerability allows successful authenticated network attacks via TCP/IP. Successful attack of this...
[SECURITY] Fedora 26 Update: ruby-2.4.3-87.fc26
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[SECURITY] Fedora 27 Update: ruby-2.4.3-87.fc27
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
HPE System Management 7.6.0.11 Cross Site Scripting
Product: HPE System Management Homepage Versions: 7.6.0.11 and minor versions Vulnerability: JavaScript Injection in file gsearch.php, parameter prod OWASP TOP 10: A1 Injection Type: Javascript Injection Impact: Allows an attacker to perform an XSS Cross-Site Scripting attack, execute arbitrary...
CVE-2017-12551
A local arbitrary execution of commands vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...
CVE-2017-12546
A local buffer overflow vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...
CVE-2017-12545
A remote denial of service vulnerability in HPE System Management Homepage for Windows and Linux version prior to v7.6.1 was found...