HPESBHF04431 rev.1 - Certain HPE ProLiant DX Servers using Certain Intel Processor, INTEL-SA-00738, 2023.1 IPU – Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | |...

HPESBHF04437 rev.1 - Certain HPE Synergy Servers using Certain Intel Processor, INTEL-SA-00738, 2023.1 IPU – Intel Xeon Processor Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-33196 |...

HPESBHF04416 rev.1 - Certain HPE ProLiant Servers Using Certain Intel Processors, INTEL-SA-00730, 2023.1 IPU - 3rd Generation Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server -prior to 1.7202-02-2023 HPE ProLiant DL360 Gen10 Plus server -prior to 1.7202-02-2023 HPE ProLiant DL380 Gen10 Plus server -prior...

HPESBHF04432 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00767, 2023.1 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score |...

HPESBHF04430 rev.1 - Certain HPE ProLiant DX Servers Using Certain Intel Processors, INTEL-SA-00730, 2023.1 IPU - 3rd Generation Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX360 Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX380 Gen10 Plus server - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score |...

HPESBHF04444 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00767, 2023.1 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04439 rev.1 - Certain HPE Apollo, XL Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Apollo 4200 Gen10 Plus System - Prior to 1.7202-02-2023 HPE Apollo 2000 Gen10 Plus System - Prior to 1.7202-02-2023 HPE ProLiant XL290n Gen10 Plus Server - Prior to...

HPESBHF04415 rev.2 - HPE ProLiant DL/ML/Microserver Servers Using Intel Server Platform Services (SPS) Firmware, INTEL-SA-00718, 2023.1 IPU - Intel Chipset Firmware Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL360 Gen10 Plus server -Prior to 04.04.04.300 - CVE-2022-36348 HPE ProLiant DL380 Gen10 Plus server -Prior to 04.04.04.300 - CVE-2022-36348 HPE ProLiant DL110...

HPESBHF04436 rev.1 - Certain HPE Synergy Servers Using Certain Intel Processors, INTEL-SA-00730, 2023.1 IPU - 3rd Generation Intel Xeon Scalable Processors Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Synergy 480 Gen10 Plus Compute Module - Prior to 1.7202-02-2023 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2022-33972 |...

HPESBHF04413 rev.1 - Certain HPE ProLiant Servers Using Certain Intel Processors, INTEL-SA-00700, 2023.1 IPU - Intel Atom and Intel Xeon Scalable Processors Advisory, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL110 Gen10 Plus Telco server -Prior to 1.7202-02-2023 HPE ProLiant DL360 Gen10 Plus server -Prior to 1.7202-02-2023 HPE ProLiant DL380 Gen10 Plus server -Prior t...

HPESBHF04418 rev.1 - Certain HPE ProLiant DL/ML/MicroServer Servers Using Certain Intel Processors, INTEL-SA-00767, 2023.1 IPU - Intel Processor Advisory, Local Disclosure of Information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen10 Plus server -prior to 1.6801-12-2023 HPE ProLiant DL110 Gen10 Plus Telco server -prior to 1.7202-02-2023 HPE ProLiant DL360 Gen10 Plus server -prior ...

HPESBHF04428 rev.2 - Certain HPE Proliant DX Servers Using Certain Intel Processors, INTEL-SA-00717, 2023.1 IPU - BIOS Advisory, Multiple Local Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DX220n Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX360 Gen10 Plus server - Prior to 1.7202-02-2023 HPE ProLiant DX380 Gen10 Plus server - Prior to...

ManageEngine ADSelfService Plus Unauthenticated SAML Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated remote code execution vulnerability that affects Zoho ManageEngine AdSelfService Plus versions 6210 and below. Due to a dependency to an outdated library Apache Santuario version 1.4.1, it is possible to execute arbitrary code by providing a...

sklearn-plus (0.0.5) potentially affected by CVE-2023-24816 via ipython (5.0.0)

ipython PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - sklearn-plus 0.0.5 Source cves: CVE-2023-24816 Source advisory: OSV:PYSEC-2023-17...

sklearn-plus (0.0.5) potentially affected by CVE-2023-24816 via ipython (5.0.0)

ipython PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - sklearn-plus 0.0.5 Source cves: CVE-2023-24816 Source advisory: OSV:GHSA-29GW-9793-FVW7...

CVE-2023-24347

D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the webpage parameter at /goform/formSetWanDhcpplus...

ManageEngine ServiceDesk Plus MSP Unauthenticated RCE (CVE-2022-47966)

Binary data manageengineservicedeskmspcve-2022-47966.nbin...

ManageEngine ADSelfService Plus Unauthenticated SAML Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine ADSelfService Plus Unauthenticated SAML RCE', 'Description' = %q This exploits an unauthenticated remote code execution vulnerabilit...

Zoho ManageEngine ServiceDesk Plus 14003 Remote Code Execution Exploit

This Metasploit module exploits an unauthenticated remote code execution vulnerability that affects Zoho ManageEngine ServiceDesk Plus versions 14003 and below CVE-2022-47966. Due to a dependency to an outdated library Apache Santuario version 1.4.1, it is possible to execute arbitrary code by...

Zoho ManageEngine ServiceDesk Plus 14003 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine ServiceDesk Plus Unauthenticated SAML RCE', 'Description' = %q This exploits an unauthenticated remote code execution vulnerability...