2787 matches found
CVE-2016-8103
CVE-2016-8103 affects Intel Branded NUC Kits. The issue is a System Management Mode (SMM) call-out that enables a local privileged user to access SMM and take full control of the platform. Public descriptions in the NVD entry indicate local attack with high privileges and high impact on confident...
CVE-2016-8103: Undefined Security Weakness
SMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System Management Mode and take full control of the platform...
CentOS 6 / 7 : sudo (CESA-2016:2872)
An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
Moderate: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
PT-2016-7469
Name of the Vulnerable Software and Affected Versions Lenovo ThinkPad systems affected versions not specified Description A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems. This issue can allow an attacker with Windows administrator-level privileg...
CVE-2016-8222: Improper Access Control
A vulnerability has been identified in a signed kernel driver for the BIOS of some ThinkPad systems that can allow an attacker with Windows administrator-level privileges to call System Management Mode SMM services. This could lead to a denial of service attack or allow certain BIOS variables or...
Intel® Branded NUC’s Vulnerable to SMM Exploit
Summary: Intel is releasing updated BIOS firmware for a privilege escalation issue. This issue affects Intel® NUC Kits listed in the affected products section below. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: A malicious...
HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03653)
HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
HP System Management Homepage SetSMHData admin-group Parameter Handling RCE
The HP System Management Homepage SMH running on the remote host is affected by a remote code execution vulnerability due to an overflow condition in the modsmhconfig.so library caused by improper validation of user-supplied input when parsing the admin-group parameter supplied to the...
HP System Management Homepage < 7.6 Multiple Vulnerabilities (HPSBMU03653) (httpoxy)
According to its banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.6. It is, therefore, affected by the following vulnerabilities : - A heap buffer overflow condition exists in OpenSSL in the EVPEncodeUpdate function within file...
HPE System Management Homepage Information Disclosure Vulnerability
HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. A security vulnerability exists in versions of HPE SMH prior to v7.6, which can be exploited by remote attackers to obtain sensitive information...
HPE System Management Homepage Buffer Overflow Vulnerability
HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. A buffer overflow vulnerability exists in versions prior to HPE SMH v7.6, which can be exploited by remote attackers to cause a denial of service...
HPE System Management Homepage Buffer Overflow Vulnerability (CNVD-2016-10580)
HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. A buffer overflow vulnerability exists in versions prior to HPE SMH v7.6, which can be exploited by remote attackers to cause a denial of service...
Hewlett Packard Enterprise System Management Homepage SSO TKN Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise System Management Homepage. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of /proxy/sso requests. When parsin...
Hewlett Packard Enterprise System Management Homepage SetSMHData Stack Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett Packard Enterprise System Management Homepage. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of /proxy/SetSMHData requests. When...
HPE System Management Homepage Cross-Site Scripting Vulnerability
HPE System Management Homepage SMH is a Web-based interface from Hewlett Packard Enterprise HPE. The interface consolidates and simplifies the process of single-system management of HP servers running HP-UX, Linux, and Microsoft Windows operating systems. A cross-site scripting vulnerability exis...
CVE-2016-4396
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...
CVE-2016-4395
HPE System Management Homepage before v7.6 allows remote attackers to have an unspecified impact via unknown vectors, related to a "Buffer Overflow" issue...