2482 matches found
CVE-2015-4915
Unspecified vulnerability in the Integrated Lights Out Manager ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management...
CVE-2015-4915
Technical details (affected product/version, root cause, impact, exploit information) are not publicly available in the provided documents; monitor for updates.
HP System Management Homepage Single Sign On Parameter Handling RCE
Binary data hpsmhzdi-15-262.nbin...
Local APIC Elevation of Privilege
Summary: Intel is releasing mitigations for a privilege escalation issue. This issue affects certain Intel processors based on older Intel micro-architectures. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: An issue was...
HP System Management Homepage < 7.2.5 / 7.4.1 Multiple Vulnerabilities (POODLE)
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.2.5 or 7.4.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists exists in OpenSSL due to the pretty...
HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03380)
HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
HP System Management Homepage Cross-Site Request Forgery Vulnerability
HP System Management Homepage is a Web-based interface released by Hewlett-Packard HP. The interface consolidates and simplifies the single system management process SMH for HP servers running HP-UX, Linux and Microsoft Windows operating systems. A cross-site request forgery vulnerability exists ...
CVE-2015-2134
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2134
HP System Management Homepage (SMH) prior to version 7.5.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an authenticated remote user to hijack another user’s session and perform actions on behalf of the victim. The HP Security Bulletin HPSBMU03409 (rev.1) lists CVE...
CVE-2015-2134
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
KLA10641 Multiple vulnerabilities in HP System Management Homepage
Multiple serious vulnerabilities have been found in HP System Management Homepage. Malicious users can exploit remotely these vulnerabilities to cause a denial of service, execution of arbitrary code, unauthorized modifications and access, disclosure of information and CSRF cross-site request...
HP System Management Homepage Single Sign On Feature Stack Buffer Overflow Vulnerability
HP System Management Homepage is a Web-based interface. The interface consolidates and simplifies the process of single-system management of HP servers running HP-UX, Linux, and Microsoft Windows operating systems. A stack buffer overflow vulnerability exists in HP System Management Homepage, whi...
Toshiba 4690 OS contains an information disclosure vulnerability
Overview The Toshiba 4690 operating system, version 6 Release 3 and possibly earlier versions, contains an information disclosure vulnerability. Description CWE-200: Information Exposure - CVE-2014-4876The Toshiba 4690 operating system, version 6 Release 3 and possibly earlier versions, contains...
[SECURITY] Fedora 21 Update: ruby-2.1.6-27.fc21
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[SECURITY] Fedora 22 Update: ruby-2.2.2-11.fc22
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
Whitney Walton Internet behavior management system vulnerability packaged-vulnerability warning-the black bar safety net
Brief description: Contains a arbitrary File Download, 2 arbitrary code execution getshell, again without login. It is not individual to submit to be despised brush the hole, not continue to dig, and left to posterity to dig. Detailed description: A, arbitrary File Download Vulnerability file:...
Multiple Product SMM Local Code Execution Vulnerabilities
System Management Mode SMM is the highest privilege execution mode on x86 processors. Multiple BIOS implementations allow the SMM function to call memory locations other than SMRAM. An attacker with access to physical memory first corrupts the function pointer or function called by SMM, then writ...
Cisco Hosted Collaboration Solution Unauthorized System Access Vulnerability
A vulnerability in the Simple Object Access Protocol SOAP Interface of the Cisco Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted system. An attacker could exploit the vulnerability by transmitting crafted Challenge SOAP...
