2500 matches found
Intel系统管理模式本地特权提升漏洞
BUGTRAQ ID:30823 CNCAN ID：CNCAN-2008082603 Intel System Management Mode是一款为便携式计算机的电源管理特征服务的解决方案。 Intel BIOS存在一个未明安全问题，运行在管理员ring0权限下的软件在部分条件下可更改运行在SMM下的代码。 SMM是运行与OS控制之外的特权操作环境，恶意用户利用漏洞可修改运行在SMM中的软件，执行各种操作。要利用此漏洞需要攻击者拥有管理级别特权。目前没有详细漏洞细节提供。 受影响产品包括： DQ35JO, DQ35MP, DP35DP, DG33FB, DG33BU, DG33TL,...
HPSystem Management Homepage (SMH) 2.1.12 - 'message.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/30846/info HP System Management Homepage SMH is prone to a cross-site scripting vulnerability. Exploiting this vulnerability may allow an attacker to perform cross-site scripting attacks on unsuspecting users in the context of the affected site. As a...
Intel® Desktop and Intel® Mobile Boards Privilege Escalation
Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for select Intel desktop motherboards to ensure proper configuration settings. This change would prevent a malicious...
[SECURITY] Fedora 9 Update: ruby-1.8.6.230-1.fc9
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
Information disclosure
Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted...
CVE-2008-3236
Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted...
CVE-2008-3236
The vulnerability CVE-2008-3236 affects IBM WebSphere Application Server (WAS) 5.1 and earlier, in the Wsadmin within the System Management/Repository component. The root cause is that previously encrypted properties were not actually encrypted, enabling an attacker to obtain sensitive informatio...
CVE-2008-3236
Unspecified vulnerability in Wsadmin in the System Management/Repository component in IBM WebSphere Application Server WAS 5.1 before 5.1.1.19 allows attackers to obtain sensitive information via vectors related to "previously encrypted properties" that are not encrypted...
HP System Management Homepage < 2.1.12 Unspecified XSS
The remote host appears to be running HP System Management Homepage SMH, a web-based management interface for ProLiant and Integrity servers. The version of HP SMH installed on the remote host fails to sanitize user input to an unspecified parameter and script before using it to generate dynamic...
CVE-2008-1663
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH 2.1.10 and 2.1.11 on Linux and Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2008-1663
HP System Management Homepage (SMH) versions 2.1.10 and 2.1.11 on Linux and Windows are vulnerable to cross-site scripting (XSS) via unspecified vectors, allowing remote attackers to inject arbitrary script/HTML. The underlying issue is an XSS vulnerability in SMH that lacks details about input h...
[SECURITY] Fedora 8 Update: ruby-1.8.6.230-4.fc8
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[SECURITY] Fedora 9 Update: ruby-1.8.6.230-4.fc9
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[security bulletin] HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage (SMH) for Linux and Windows, Remote Cross Site Scripting (XSS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01488878 Version: 1 HPSBMA02345 SSRT080039 rev.1 - HP System Management Homepage SMH for Linux and Windows, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin shoul...
Linux和windows平台下的HP System Management Homepage (SMH)跨站脚本漏洞
BUGTRAQ ID: 30029 CVE ID：CVE-2008-1663 CNCVE ID：CNCVE-20081663 HP System Management Homepage是HP公司发布的系统管理主页。 HP System Management Homepage不正确处理用户提交的输入，远程攻击者可以利用漏洞进行跨站脚本攻击，获得敏感信息。 目前没有详细漏洞细节提供。 HP System Management Homepage 2.1.11 HP System Management Homepage 2.1.10 可联系供应商获得补丁信息：...
- HP System Management Homepage crossite scripting
No description provided...
[SECURITY] Fedora 9 Update: ruby-1.8.6.230-1.fc9
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
[SECURITY] Fedora 8 Update: ruby-1.8.6.230-1.fc8
Ruby is the interpreted scripting language for quick and easy object-oriented programming. It has many features to process text files and to do system management tasks as in Perl. It is simple, straight-forward, and extensible...
HP System Management Homepage cross-site scripting vulnerability
Overview A cross-site scripting vulnerability exists in Hewlett-Packard HP System Management Homepage SMH. HP System Management Homepage SMH from Hewlett-Packard is a web-based interface that can manage HP servers. A cross-site scripting vulnerability exists in SMH. It is also confirmed that Comp...