HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2018-7117)

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

EUVD-2018-18844

Malware in sbrugna...

EUVD-2019-3638

Malware in sbrugna...

EUVD-2018-18860

Malware in sbrugna...

EUVD-2018-18821

Malware in sbrugna...

EUVD-2022-33078

Malicious code in bioql PyPI...

EUVD-2022-33069

Malicious code in bioql PyPI...

EUVD-2023-55083

Malicious code in bioql PyPI...

EUVD-2022-33082

Malicious code in bioql PyPI...

EUVD-2022-33070

Malicious code in bioql PyPI...

EUVD-2022-33080

Malicious code in bioql PyPI...

EUVD-2022-33072

Malicious code in bioql PyPI...

EUVD-2022-33076

Malicious code in bioql PyPI...

CVE-2022-28638

An isolated local disclosure of information and potential isolated local arbitrary code execution vulnerability that could potentially lead to a loss of confidentiality, integrity, and availability were discovered in HPE Integrated Lights-Out 5 iLO 5 in Version: 2.71. Hewlett Packard Enterprise h...

CVE-2022-28628

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability...

CVE-2022-28627

A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability...

CVE-2021-29210

A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4; HPE SimpliVity 380 Gen9; HPE Integrated Lights-Out 5 iLO 5 for HPE Gen10 Servers; HPE SimpliVity 380 Gen10; HPE SimpliVity 2600; HPE SimpliVity 380 Gen10 G; HPE SimpliVity 325; HPE SimpliVity 380...

CVE-2018-7117

A remote Cross-Site Scripting in HPE iLO 5 Web User Interface vulnerability was identified in HPE Integrated Lights-Out 5 iLO 5 for Gen10 ProLiant Servers earlier than version v1.40...

Authentication flaw

A potential security vulnerability has been identified in HPE Integrated Lights-Out 5 iLO 5 and Integrated Lights-Out 6 iLO 6. The vulnerability could be remotely exploited to allow authentication bypass...

CVE-2023-50272

CVE-2023-50272 affects HPE Integrated Lights-Out 5 (iLO 5) and iLO 6. The provided documents indicate a vulnerability that could be exploited remotely to bypass authentication, with potential impacts on confidentiality, integrity, and availability as reflected in the NVD metrics (base score up to...