Lucene search
+L

18130 matches found

OSV
OSV
•added 2021/02/08 7:15 p.m.•16 views

CVE-2021-26570

The Baseboard Management Controller BMC firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifcsetadconfig function...

7.8CVSS7.4AI score0.00504EPSS
SaveExploits0References2
Hewlett-Packard
Hewlett-Packard
•added 2021/02/06 12:00 a.m.•55 views

HPSBHF03718 rev. 3 - Intel® PROSet/Wireless WiFi and Killer™ Driver February 2021 Security Update

Potential Security Impact Information Disclosure, Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in some Intel® PROSet/Wireless WiFi and Killer™ drivers for Window...

4.8CVSS2.3AI score0.0042EPSS
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2021/02/06 12:00 a.m.•92 views

HPSBHF03716 rev. 3 - Intel® Ethernet I210 Controller February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in the Intel® Ethernet I210 Controller series of network adapters which may allow denial o...

6.7CVSS2.3AI score0.00267EPSS
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2021/02/06 12:00 a.m.•42 views

HPSBHF03717 rev. 3 - Intel® Ethernet Controllers February 2021 Security Updates

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of potential security vulnerabilities identified in some Intel® Ethernet Controllers which may allow denial of service. Intel is releasing...

6CVSS2.4AI score0.00594EPSS
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2021/02/05 12:00 a.m.•42 views

HPSBHF03715 rev. 1 - Intel® Optane™ DC Persistent Memory Software February 2021 Security Update

Potential Security Impact Escalation of Privilege Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Optane™ DC Persistent Memory installer for Windows Server 2019 which m...

6.7CVSS3.4AI score0.00303EPSS
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2021/02/05 12:00 a.m.•46 views

HPSBHF03714 rev. 1 - Intel® XMM™ 7360 Cell Modem February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® XMM™ 7360 Cell Modem that might allow denial of service. Intel is releasing...

7CVSS2.1AI score0.01117EPSS
SaveExploits0
Hewlett-Packard
Hewlett-Packard
•added 2021/02/05 12:00 a.m.•55 views

HPSBHF03713 rev. 1 - Intel® Extreme Tuning Utility (XTU) February 2021 Security Update

Potential Security Impact Denial of Service Source: HP, HP Product Security Response Team PSRT Reported By: Intel VULNERABILITY SUMMARY Intel has informed HP of a potential security vulnerability identified in the Intel® Extreme Tuning Utility XTU which may allow denial of service. Intel is...

6.7CVSS2.6AI score0.00539EPSS
SaveExploits0
attackerkb
attackerkb
•added 2021/01/29 7:15 p.m.•9 views

CVE-2021-25134

The Baseboard Management ControllerBMC in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spxrestservice setremoteimageinfofunc...

7.8CVSS7.5AI score0.00341EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2021/01/25 5:19 p.m.•56 views

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition

Summary Java SE issues disclosed in the Oracle October 2020 Critical Patch Update minus CVE-2020-14781 and CVE-2020-14782. CVE-2020-14781 and CVE-2020-14782 will be covered by additional bulletins. Vulnerability Details CVEID: CVE-2020-14792 DESCRIPTION: An unspecified vulnerability in Java SE...

5.8CVSS0.9AI score0.03758EPSS
SaveExploits0Affected Software2
OSV
OSV
•added 2021/01/13 4:15 p.m.•26 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.5CVSS6.6AI score
SaveExploits0References1
NVD
NVD
•added 2021/01/13 4:15 p.m.•36 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.5CVSS5.3AI score0.00335EPSS
SaveExploits0References1
Prion
Prion
•added 2021/01/13 4:15 p.m.•25 views

Design/Logic Flaw

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

2.1CVSS5.4AI score0.00335EPSS
SaveExploits0References1Affected Software1
Mend
Mend
•added 2021/01/13 3:55 p.m.•4 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

6.8CVSS0.00335EPSS
SaveExploits0References4
CVE
CVE
•added 2021/01/13 3:55 p.m.•106 views

CVE-2021-21614

Summary: CVE-2021-21614 affects the Jenkins Bumblebee HP ALM Plugin (version 4.1.5 and earlier). The underlying issue is that credentials are stored unencrypted in the plugin’s global configuration file on the Jenkins controller, which can be viewed by users with access to the controller filesyst...

5.5CVSS5.6AI score0.00335EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/13 3:55 p.m.•48 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

6AI score0.00335EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2021/01/13 3:55 p.m.•86 views

CVE-2021-21614

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.5CVSS2.6AI score0.00335EPSS
SaveExploits0References1
Prion
Prion
•added 2021/01/13 6:15 a.m.•26 views

Design/Logic Flaw

The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...

4.4CVSS7.8AI score0.00348EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/01/13 5:05 a.m.•43 views

CVE-2020-35686

The SECOMN service in Sound Research DCHU model software component modules APO through 2.0.9.17, delivered on HP Windows 10 computers, may allow escalation of privilege via a fake DLL. As a resolution, Windows Update is being submitted for all affected products to update to 2.0.9.18 or later...

7.9AI score0.00348EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/13 12:00 a.m.•6 views

CVE-2021-21614: Insufficiently Protected Credentials

Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system...

5.5CVSS5.8AI score0.00335EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/01/13 12:00 a.m.•22 views

Cloudbees Jenkins 信息泄露漏洞

Cloudbees Jenkins Hudson Labs is the United States CloudBees Cloudbees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Bumblebee HP ALM Plugin is us...

5.5CVSS6.1AI score0.00335EPSS
SaveExploits0References4
Rows per page
Query Builder