CVE-2016-1996

HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-1995

HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-1994

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-1994

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors...

CVE-2016-1993

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-1993

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

Information disclosure

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors...

Information disclosure

HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors...

Design/Logic Flaw

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-1993

CVE-2016-1993 affects HPE System Management Homepage (SMH) prior to version 7.5.4. The vulnerability allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. The initial description does not specify the exact exploit vectors or affected components ...

CVE-2016-1993

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-1995

HP System Management Homepage (SMH) is affected prior to version 7.5.4. The OpenVAS/Nessus entries indicate an unspecified remote code execution vulnerability that can allow a remote attacker to take control of the system. No detailed exploit vectors or root-cause are provided in the connected do...

CVE-2016-1995

HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-1994

CVE-2016-1994 affects HP System Management Homepage (SMH) prior to version 7.5.4. The vulnerability enables remote authenticated users to obtain sensitive information via unspecified vectors, with CVSS indicating at least a partial confidentiality impact (NVD: CVSS2/3 base scores: 4.0/6.5). No sp...

CVE-2016-1996

Product & impact: HP System Management Homepage (SMH) prior to version 7.5.4 is affected by CVE-2016-1996. What’s affected: SMH component prior to 7.5.4 (

冰峰VPN /log/system.log 敏感信息泄漏漏洞

由于“ICEFLOW VPN Router”设备产品存在各种日志文件未授权访问可导致系统敏感信息泄漏。（包括登录成功后的session值） 系统日志http://url/log/system.log VPN日志http://url/log/vpn.log 移动用户日志http://url/log/mobile.log 防火墙日志http://url/log/firewall.log 访问日志http://url/log/access.log 告警日志http://url/log/warn.log 错误日志http://url/log/error.log...

[SECURITY] Fedora 22 Update: ruby-2.2.4-47.fc22

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

The vulnerability of the HP System Management Homepage software allows a perpetrator to bypass the authentication process for arbitrary users.

The vulnerability of the HP System Management Homepage software relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to bypass the authentication procedures for arbitrary users...

Moderate: Red Hat Bug Fix Advisory: sudo bug fix and enhancement update

Updated sudo packages that fix several bugs and add one enhancement are now available for Red Hat Enterprise Linux 7. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for syste...

Code injection

Unspecified vulnerability in the Integrated Lights Out Manager ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management...