Lucene search
+L

2484 matches found

CVE
CVE
added 2023/12/22 12:00 a.m.60 views

CVE-2023-51708

Summary: CVE-2023-51708 affects Bentley eB System Management Console (Assetwise Integrity Information Server). An unauthenticated user can view configuration options via a crafted request, causing information disclosure. Affected versions are eB System Management Console prior to 23.00.02.03 and ...

8.6CVSS8.1AI score0.00465EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/12/22 12:00 a.m.37 views

CVE-2023-51708

Bentley eB System Management Console applications within Assetwise Integrity Information Server allow an unauthenticated user to view configuration options via a crafted request, leading to information disclosure. This affects eB System management Console before 23.00.02.03 and Assetwise ALIM For...

8.4AI score0.00465EPSS
SaveExploits0References1
OSV
OSV
added 2023/12/17 3:15 p.m.9 views

CVE-2023-50271

A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...

7.5CVSS5.7AI score0.00499EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/12/17 12:00 a.m.10 views

Hewlett Packard Enterprise System Management Homepage Security Vulnerability

The Hewlett Packard Enterprise System Management Homepage is a web-based interface for Hewlett Packard Enterprise. A security vulnerability exists in Hewlett Packard Enterprise System Management Homepage, which originates from an information disclosure vulnerability...

7.5CVSS6.3AI score0.00499EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/12/14 4:30 p.m.81 views

Moderate: Red Hat Security Advisory: Satellite 6.14.1 Async Security Update

Updated Satellite 6.14 packages that fixes Important security bugs and several regular bugs are now available for Red Hat Satellite. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the necessity to provide public Internet...

8.1CVSS6.8AI score0.01207EPSS
SaveExploits3References17
CNVD
CNVD
added 2023/12/14 12:00 a.m.80 views

SAP Solution Manager Command Injection Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as one of the system management platform. The platform can help customers establish SAP solution lifecycle management, and provide system...

6.4CVSS7.5AI score0.00408EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2023/12/11 12:00 a.m.9 views

The vulnerability of the System Management Mode (SMM) feature of AMD Ryzen microprogramming systems allows attackers to enhance their privileges and compromise the integrity, accessibility, and confidentiality of protected information.

The vulnerability of the System Management Mode SMM feature of AMD Ryzen microprocessor-based software systems is related to insufficient validation of input data. Exploiting this vulnerability can allow unauthorized actors to gain enhanced privileges and impact the integrity, availability, and...

10CVSS7.7AI score0.01045EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/12/01 12:00 a.m.10 views

The vulnerability of the ProSAFE Network Management System’s (NMS300) management, diagnosis, and optimization functions relates to deficiencies in access control. This vulnerability allows attackers to enhance their privileges.

The vulnerability of the ProSAFE Network Management System NMS300 in terms of system management, diagnosis, and optimization of network device operations is related to deficiencies in access control due to incorrect context determination for searching user credentials. Exploiting this vulnerabili...

7.8CVSS5.5AI score0.00537EPSS
SaveExploits1References4Affected Software1
CNVD
CNVD
added 2023/11/24 12:00 a.m.24 views

Dell Command Monitor Elevation of Privilege Vulnerability

The Dell Command Monitor software application enables IT administrators to easily manage fleet inventory, monitor system operating conditions, modify BIOS settings, and remotely collect information from deployed Dell client systems. Proactive system health monitoring can help reduce total system...

7.8CVSS6.4AI score0.00196EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2023/11/18 12:00 a.m.9 views

VulnCheck KEV: CVE-2022-38130

The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e.,...

9.8CVSS7.3AI score0.54072EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/11/16 1:58 a.m.9 views

SUSE CVE-2021-46774

Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...

6.7CVSS5.6AI score0.00508EPSS
SaveExploits0References9
SUSE CVE
SUSE CVE
added 2023/11/16 1:56 a.m.5 views

SUSE CVE-2022-23820

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code execution...

7.5CVSS5.9AI score0.00697EPSS
SaveExploits0References13
SUSE CVE
SUSE CVE
added 2023/11/16 1:55 a.m.6 views

SUSE CVE-2023-20533

Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...

6.1CVSS5.6AI score0.00499EPSS
SaveExploits0References9
OSV
OSV
added 2023/11/15 12:15 a.m.10 views

CVE-2023-31100

Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification. This issue affects SecureCore™ Technology™ 4: from 4.3.0.0 before 4.3.0.203 from 4.3.1.0 before 4.3.1.163 from 4.4.0.0 before 4.4.0.217 from 4.5.0.0 before 4.5.0.138...

7.1CVSS5.8AI score0.00189EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/14 7:15 p.m.8 views

CVE-2023-20571

A race condition in System Management Mode SMM code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in privilege escalation...

8.1CVSS7.3AI score0.00447EPSS
SaveExploits9References1
OSV
OSV
added 2023/11/14 7:15 p.m.4 views

CVE-2023-20533

Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...

7.5CVSS6.3AI score0.00499EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/14 7:15 p.m.4 views

CVE-2023-20563

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00204EPSS
SaveExploits0References2
OSV
OSV
added 2023/11/14 7:15 p.m.6 views

CVE-2023-20565

Insufficient protections in System Management Mode SMM code may allow an attacker to potentially enable escalation of privilege via local access...

7.8CVSS5.8AI score0.00205EPSS
SaveExploits0References2
NVD
NVD
added 2023/11/14 7:15 p.m.44 views

CVE-2023-20533

Insufficient DRAM address validation in System Management Unit SMU may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting in denial-of-service...

7.5CVSS0.00499EPSS
SaveExploits0References3
OSV
OSV
added 2023/11/14 7:15 p.m.11 views

CVE-2022-23821

Improper access control in System Management Mode SMM may allow an attacker to write to SPI ROM potentially leading to arbitrary code execution...

9.8CVSS7.3AI score0.00989EPSS
SaveExploits0References2
Rows per page
Query Builder