Multiple Product SMM Local Code Execution Vulnerabilities

System Management Mode SMM is the highest privilege execution mode on x86 processors. Multiple BIOS implementations allow the SMM function to call memory locations other than SMRAM. An attacker with access to physical memory first corrupts the function pointer or function called by SMM, then writ...

Cisco Hosted Collaboration Solution Unauthorized System Access Vulnerability

A vulnerability in the Simple Object Access Protocol SOAP Interface of the Cisco Hosted Collaboration Solution HCS could allow an unauthenticated, remote attacker to gain unauthorized access to a targeted system. An attacker could exploit the vulnerability by transmitting crafted Challenge SOAP...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

Design/Logic Flaw

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

CVE-2015-0626

The CVE-2015-0626 issue affects Cisco Hosted Collaboration Solution (HCS) via the SOAP interface. The vulnerability stems from the SOAP processing of Challenge SOAP calls, enabling an unauthenticated, remote attacker to obtain access to system-management tools on vulnerable HCS deployments. Explo...

CVE-2015-0626

The SOAP interface in Cisco Hosted Collaboration Solution HCS allows remote attackers to obtain access to system-management tools via crafted Challenge SOAP calls, aka Bug ID CSCuc38114...

Oracle Siebel Core - Unspecified Vulnerability in System Management Component

Oracle Siebel is a customer relationship management software. A security vulnerability exists in the Server Infrastructure child of the Oracle Siebel Core - System Management component, which could be exploited by remote attackers to compromise system confidentiality...

Unspecified Arbitrary Code Execution Vulnerability in Oracle Solaris Cluster (CNVD-2015-00620)

Oracle Solaris Cluster is a product that provides expanded high availability and disaster recovery capabilities. An unspecified security vulnerability exists in the Oracle Solaris Cluster System management child, which can be exploited by a remote attacker to execute arbitrary code by submitting ...

Unspecified Arbitrary Code Execution Vulnerability in Oracle Solaris Cluster

Oracle Solaris Cluster is a product that provides expanded high availability and disaster recovery capabilities. An unspecified security vulnerability exists in the Oracle Solaris Cluster System management child, which can be exploited by a local attacker to execute arbitrary code by submitting a...

CVE-2014-6480

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to System management...

CVE-2014-4259

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to System management...

Code injection

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to System management...

Code injection

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to System management...

CVE-2014-6528

Unspecified vulnerability in the Siebel Core - System Management component in Oracle Siebel CRM 8.1.1 and 8.2.2 allows remote authenticated users to affect confidentiality via unknown vectors related to Server Infrastructure...

CVE-2014-6480

Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Systems Products Suite 3.3 and 4.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to System management...

CVE-2014-6528

Oracle Siebel CRM 8.1.1 and 8.2.2 are affected by an unspecified vulnerability in the Siebel Core - System Management component. The CVE description indicates remote authenticated access can affect confidentiality via unknown vectors related to Server Infrastructure. The connected Nessus/CNVD/NVD...

Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update

Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman foreman-proxy katello-agent pulp pulp-nodes pulp-puppet pulp-rpm ruby193-rubygem-fog ruby193-rubygem-foreman-tasks packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is a system...

Important: Red Hat Bug Fix Advisory: Red Hat Satellite 6 server bug fix update

Updated the following packages to fix several bugs in Red Hat Satellite 6: foreman, foreman-compute, foreman-gce, foreman-libvirt, foreman-ovirt, foreman-postgresql, foreman-vmware and ruby193-rubygem-katello packages. These packages are now available in Red Hat Satellite 6. Red Hat Satellite is ...

[SECURITY] Fedora 21 Update: ruby-2.1.4-24.fc21

Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...

HP System Management Homepage red2301.html RedirectUrl Cross Site Scripting (CVE-2014-2640)

A cross-site scripting vulnerability exists in HP's System Management Homepage SMH. The vulnerability is due to an input validation error when handling 'RedirectUrl' parameter of red2301.html page. A remote attacker could exploit this vulnerability by enticing a target user to follow a malicious...