2945 matches found
HP Integrated Lights-Out Cryptographic Issues (CVE-2016-4379)
The TLS implementation in HPE Integrated Lights-Out 3 aka iLO3 firmware before 1.88 does not properly use a MAC protection mechanism in conjunction with CBC padding, which allows remote attackers to obtain sensitive information via a padding-oracle attack, aka a Vaudenay attack. This plugin only...
HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2021-29209)
"A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504390; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/11/13";...
HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2021-29205)
"A remote xss vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504417; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/11/13"; scriptcveid"CVE-2021-29205";...
HP Integrated Lights-Out Information Disclosure (CVE-2017-12543)
A remote disclosure of information vulnerability in Moonshot Remote Console Administrator Prior to 2.50, iLO4 prior to v2.53, iLO3 prior to v1.89 and iLO2 prior to v2.30 was found. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more informatio...
HP Integrated Lights-Out Improper Neutralization of Input During Web Page Generation (CVE-2021-29208)
"A remote dom xss, crlf injection vulnerability was discovered in HPE Integrated Lights-Out 4 iLO 4 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid504425; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate", value:"2025/11/13";...
HP Integrated Lights-Out Improper Input Validation (CVE-2016-4375)
Multiple unspecified vulnerabilities in HPE Integrated Lights-Out 3 aka iLO 3 firmware before 1.88, Integrated Lights-Out 4 aka iLO 4 firmware before 2.44, and Integrated Lights-Out 4 aka iLO 4 mRCA firmware before 2.32 allow remote attackers to obtain sensitive information, modify data, or cause...
HP Integrated Lights-Out Improper Input Validation (CVE-2022-28628)
A local arbitrary code execution vulnerability was discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could locally exploit this vulnerability to execute arbitrary code resulting in a complete loss of confidentiality, integrity, and availability...
HP Integrated Lights-Out Improper Input Validation (CVE-2022-28631)
A potential arbitrary code execution and a denial of service DoS vulnerability within an isolated process were discovered in HPE Integrated Lights-Out 5 iLO 5 firmware versions: Prior to 2.71. An unprivileged user could exploit this vulnerability in an adjacent network to potentially execute...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990773)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990773 advisory. In the Linux kernel, the following vulnerability has been resolved: i2c: piix4: Fix adapter not be removed in piix4remove In piix4probe, the piix4 adapter will be...
Malicious code in integrated_termite_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2a056030b27d7bcd9e8d343cc430ebec7d3fcca05ebc9c89215b16aa8d0e2d99 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-76535
Malicious code in integratedanteater-apptea npm...
Malicious code in integrated_swordfish_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 21ff6185a708a87a5d02eed7fce4c76a1b6d871699df87238fd3c33f76c455f2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78991
Malicious code in integratedswordfishz3n npm...
EUVD-2025-81527
Malicious code in integratedpeafowl0xrequest npm...
EUVD-2025-81526
Malicious code in integratedwallaby0xrequest npm...
EUVD-2025-81528
Malicious code in integratedmammaldumbs npm...
EUVD-2025-63491
Malicious code in integratedmagpiez3n npm...
EUVD-2025-63492
Malicious code in integratedkangarooz3n npm...
MAL-2025-86739 Malicious code in integrated_loon_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a6c526929f6627b957896890951e8ccab580c6bf0d925b93f0bab970f53efc0c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...