2478 matches found
Moderate: Red Hat Security Advisory: Satellite 6.14.1 Async Security Update
Updated Satellite 6.14 packages that fixes Important security bugs and several regular bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet...
SAP Solution Manager Command Injection Vulnerability
SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...
The vulnerability of the System Management Mode (SMM) feature of AMD Ryzen microprogramming systems allows attackers to enhance their privileges and compromise the integrity, accessibility, and confidentiality of protected information.
The vulnerability of the System Management Mode SMM feature of AMD Ryzen microprocessor-based software systems is related to insufficient validation of input data. Exploiting this vulnerability can allow unauthorized actors to gain enhanced privileges and impact the integrity, availability, and...
The vulnerability of the ProSAFE Network Management System’s (NMS300) management, diagnosis, and optimization functions relates to deficiencies in access control. This vulnerability allows attackers to enhance their privileges.
The vulnerability of the ProSAFE Network Management System NMS300 in terms of system management, diagnosis, and optimization of network device operations is related to deficiencies in access control due to incorrect context determination for searching user credentials. Exploiting this vulnerabili...
Dell Command Monitor Elevation of Privilege Vulnerability
The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system...
VulnCheck KEV: CVE-2022-38130
The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e.,...
SUSE CVE-2021-46774
Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...
SUSE CVE-2022-23820
Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution...
SUSE CVE-2023-20533
Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...
CVE-2023-31100
Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: from 4.3.0.0 before 4.3.0.203 from 4.3.1.0 before 4.3.1.163 from 4.4.0.0 before 4.4.0.217 from 4.5.0.0 before 4.5.0.138...
CVE-2023-20571
A race condition in System Management Mode SMM code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation...
CVE-2023-20563
Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...
CVE-2023-20533
Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...
CVE-2023-20565
Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...
CVE-2023-20533
Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...
CVE-2021-46774
Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...
CVE-2022-23821
Improper access control in System Management Mode SMM may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution...
CVE-2022-23821
Improper access control in System Management Mode SMM may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution...