PT-2016-1435

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.5.4 Description The issue is related to errors in the code of HPE System Management Homepage, allowing remote attackers to execute arbitrary code. Recommendations For versions prior to 7.5.4,...

PT-2016-1437

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.5.4 Description The issue is related to errors in the code of the HPE System Management Homepage, which can be exploited by a remote attacker to obtain sensitive information or modify data...

PT-2016-1436

Name of the Vulnerable Software and Affected Versions HPE System Management Homepage versions prior to 7.5.4 Description The issue is related to the lack of protection for service data, allowing remote authenticated users to obtain sensitive information. Recommendations For versions prior to 7.5....

CVE-2016-1993: Undefined Security Weakness

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-1996: Undefined Security Weakness

HPE System Management Homepage before 7.5.4 allows local users to obtain sensitive information or modify data via unspecified vectors...

CVE-2016-1995: Undefined Security Weakness

HPE System Management Homepage before 7.5.4 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2016-1994: Exposure of Sensitive Information to an Unauthorized Actor

HPE System Management Homepage before 7.5.4 allows remote authenticated users to obtain sensitive information via unspecified vectors...

冰峰VPN /log/system.log 敏感信息泄漏漏洞

由于“ICEFLOW VPN Router”设备产品存在各种日志文件未授权访问可导致系统敏感信息泄漏。（包括登录成功后的session值） 系统日志http://url/log/system.log VPN日志http://url/log/vpn.log 移动用户日志http://url/log/mobile.log 防火墙日志http://url/log/firewall.log 访问日志http://url/log/access.log 告警日志http://url/log/warn.log 错误日志http://url/log/error.log...

[SECURITY] Fedora 22 Update: ruby-2.2.4-47.fc22

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

The vulnerability of the HP System Management Homepage software allows a perpetrator to bypass the authentication process for arbitrary users.

The vulnerability of the HP System Management Homepage software relates to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to bypass the authentication procedures for arbitrary users...

Moderate: Red Hat Bug Fix Advisory: sudo bug fix and enhancement update

Updated sudo packages that fix several bugs and add one enhancement are now available for Red Hat Enterprise Linux 7. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for syste...

Code injection

Unspecified vulnerability in the Integrated Lights Out Manager ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management...

CVE-2015-4915

Unspecified vulnerability in the Integrated Lights Out Manager ILOM component in Oracle Sun Systems Products Suite 3.0, 3.1, and 3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to System Management...

CVE-2015-4915

Technical details (affected product/version, root cause, impact, exploit information) are not publicly available in the provided documents; monitor for updates.

PT-2015-3056

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite versions 3.0 through 3.2 Description The issue is related to errors in the code of the Integrated Lights Out Manager component, specifically the System Management subcomponent. It may allow a remote attacker t...

HP System Management Homepage Single Sign On Parameter Handling RCE

Binary data hpsmhzdi-15-262.nbin...

Local APIC Elevation of Privilege

Summary: Intel is releasing mitigations for a privilege escalation issue. This issue affects certain Intel processors based on older Intel micro-architectures. The issue identified is a method that enables malicious code to gain access to System Management Mode SMM. Description: An issue was...

HP System Management Homepage < 7.2.5 / 7.4.1 Multiple Vulnerabilities (POODLE)

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.2.5 or 7.4.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists exists in OpenSSL due to the pretty...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03380)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

HP System Management Homepage Cross-Site Request Forgery Vulnerability

HP System Management Homepage is a Web-based interface released by Hewlett-Packard HP. The interface consolidates and simplifies the single system management process SMH for HP servers running HP-UX, Linux and Microsoft Windows operating systems. A cross-site request forgery vulnerability exists ...