PT-2024-27186

Name of the Vulnerable Software and Affected Versions Micro-Star International Z-series motherboards versions Z590, Z490, and Z790 Micro-Star International B-series motherboards versions B760, B560, B660, and B460 Micro-Star International motherboards with firmware 7D25v14, 7D25v17 through 7D25v1...

The vulnerability of the SMM callout component in Supermicro BMC controllers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the SMM callout component in Supermicro BMC controllers involves the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the SMM control mode of Dell Edge Gateway BIOS microprogramming software allows a hacker to execute arbitrary code and gain increased privileges.

The vulnerability of the SMM mode of the BIOS software for Dell Edge Gateways is related to incorrect initialization of resources. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

Unauthorized Access Vulnerability in Mobile System Management at UFIDA Network Technology Co.

UFIDA Network Technology Co., Ltd. is a company whose business scope includes technical development, technical consultation, technology transfer, technical service and technical training of electronic computer software, hardware and external equipment. An unauthorized access vulnerability exists ...

[SECURITY] Fedora 40 Update: ruby-3.3.4-11.fc40

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

Moderate: Red Hat Bug Fix Advisory: Satellite 6.15.2 Async Update

Updated Satellite 6.15 packages that fix several bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet access to their servers or other clie...

PT-2024-5267 · Supermicro · Supermicro X11Dph-Tq +2

Name of the Vulnerable Software and Affected Versions: Supermicro X11DPH-T versions prior to BIOS firmware 4.4 Supermicro X11DPH-Tq versions prior to BIOS firmware 4.4 Supermicro X11DPH-i versions prior to BIOS firmware 4.4 Description: A vulnerability was discovered in the SMM callout component ...

Moderate: Red Hat Security Advisory: ruby security update

An update for ruby is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...

Moderate: ruby security update

Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system management tasks. Security Fixes: rubygem-uri: ReDoS vulnerability - upstream's incomplete fix for CVE-2023-28755 CVE-2023-36617 ruby: Buffer overread vulnerability...

CVE-2023-32472

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or...

CVE-2023-32472

Dell Edge Gateway BIOS, versions 3200 and 5200, contains an out-of-bounds write vulnerability. A local authenticated malicious user with high privileges could potentially exploit this vulnerability leading to exposure of some code in System Management Mode, leading to arbitrary code execution or...

IBM System Management for i Code Issue Vulnerability

IBM System Management for i is a management system from International Business Machines IBM. A code issue vulnerability exists in IBM System Management for i versions 7.2, 7.3, and 7.4, which can be exploited by an attacker to cause user-controlled code to run with administrator privileges...

CVE-2024-38330

IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227...

CVE-2024-38330

IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227...

CVE-2024-38330 IBM i privilege escalation

IBM System Management for i 7.2, 7.3, and 7.4 could allow a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrator privilege. IBM X-Force ID: 295227...

CVE-2024-38330

IBM System Management for i versions 7.2, 7.3, and 7.4 are affected by a local privilege-escalation due to an unqualified library program call. A local user could cause user-controlled code to run with administrator privileges. The Red Hat-IR-IBM bulletin and IBM X-Force entry confirm the vulnera...

IBM System Management for i 代码问题漏洞

IBM System Management for i is a management system from International Business Machines IBM. A code issue vulnerability exists in IBM System Management for i versions 7.2, 7.3, and 7.4, which can be exploited by an attacker to cause user-controlled code to run with administrator privileges...

PT-2024-27946 · Ibm · Ibm System Management For I

Name of the Vulnerable Software and Affected Versions: IBM System Management for i versions 7.2 through 7.4 Description: The issue allows a local user to gain elevated privileges due to an unqualified library program call. A malicious actor could cause user-controlled code to run with administrat...

EulerOS 2.0 SP11 : ruby (EulerOS-SA-2024-1825)

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do syst...

DEBIAN-CVE-2022-48763

In the Linux kernel, the following vulnerability has been resolved: KVM: x86: Forcibly leave nested virt when SMM state is toggled Forcibly leave nested virtualization operation if userspace toggles SMM state via KVMSETVCPUEVENTS or KVMSYNCX86EVENTS. If userspace forces the vCPU out of SMM while...