CVE-2019-11987

CVE-2019-11987 affects HPE Smart Update Manager (SUM) prior to v8.4. The vulnerability allows local unauthorized elevation of privilege due to insufficient authentication/authorization and privilege management. Affected component is SUM’s update/management workflow on HP ProLiant servers. Impact ...

PT-2019-12620

Name of the Vulnerable Software and Affected Versions HPE Smart Update Manager versions prior to 8.4 Description A security issue in HPE Smart Update Manager could allow local unauthorized elevation of privilege. Recommendations For versions prior to 8.4, update to version 8.4 or later to resolve...

PT-2019-12621

Name of the Vulnerable Software and Affected Versions HPE Smart Update Manager SUM versions prior to 8.3.5 Description A Remote Unauthorized Access issue was identified. Recommendations For versions prior to 8.3.5, update to version 8.3.5 or later to resolve the issue...

CVE-2019-11988: Undefined Security Weakness

A Remote Unauthorized Access vulnerability was identified in HPE Smart Update Manager SUM earlier than version 8.3.5...

CVE-2019-11987: Undefined Security Weakness

A security vulnerability in HPE Smart Update Manager SUM prior to v8.4 could allow local unauthorized elevation of privilege...

HPESBMU03923 rev.2 - HPE Smart Update Manager (SUM), Local Unauthorized Elevation of Privilege

Potential Security Impact: Local: Unauthorized Elevation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Smart Update Manager SUM Prior to 8.4 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11987 |...

HPESBMU03922 rev.2 - HPE Smart Update Manager (SUM), Remote Unauthorized Access

Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Smart Update Manager SUM Prior to 8.3.5 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2019-11988 | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 9.8 ...

PT-2018-3001

Name of the Vulnerable Software and Affected Versions Галактика ERP affected versions not specified Description The issue is related to the lack of protection for transmitted data in the update manager component of the Галактика ERP system. This could allow a remote attacker with access to the...

Configuration Update Manager - Moderately critical - Cross Site Request Forgery (CSRF) - SA-CONTRIB-2017-091

The Configuration Update Reports sub-module in the Configuration Update module project enables you to run reports to see what configuration on your site differs from the configuration distributed by a module, theme, or installation profile, and to revert, delete, or import configuration. This...

The vulnerability of the Avira Management Console allows a hacker to execute arbitrary code.

The vulnerability of the Update Manager service in the Avira Management Console relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Avira Management Console Server HTTP Header Processing Heap Buffer Overflow

A heap buffer overflow vulnerability has been reported in Avira Management Console Server. The vulnerability exists in the way Update Manager Service handles overly long HTTP headers. A remote unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to the server...

Avira Management Console Memory Misreference Vulnerability

Avira Management Console provides centralized and effective control of Avira security components. A memory misreference vulnerability exists in the Avira Management Console's Update Manager service, which can be exploited by a remote attacker to execute arbitrary code...

CVE-2015-7303

Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header...

Design/Logic Flaw

Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header...

CVE-2015-7303

Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header...

CVE-2015-7303

CVE-2015-7303 is a use-after-free in Avira Management Console's Update Manager service. By sending oversized HTTP headers, remote attackers can trigger memory reuse and execute arbitrary code, potentially with SYSTEM privileges; authentication is not required per ZDI-15-445. Multiple entries (NVD...

CVE-2015-7303: Undefined Security Weakness

Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header...

PT-2015-2160

Name of the Vulnerable Software and Affected Versions Avira Management Console affected versions not specified Description The issue is related to a use-after-free vulnerability in the Update Manager service of Avira Management Console. This vulnerability allows remote attackers to execute...

(0Day) Avira Management Console Update Manager Service HTTP Header Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Avira Management Console. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HTTP headers by the Update Manager service. By sending overly...

VMware vSphere Update Manager Java Vulnerability (VMSA-2015-0003)

The version of VMware vSphere Update Manager installed on the remote Windows host is 5.0 prior to Update 3d, 5.1 prior to Update 3a, 5.5 prior to Update 2e, or 6.0 prior to 6.0.0a. It is, therefore, affected by a vulnerability related to the bundled version of Oracle JRE prior to 1.7.076. A flaw...