CVE-2016-5011

CVE-2016-5011 affects the libblkid component of util-linux (partitions/dos.c). The root cause is a vulnerability in parse_dos_extended that allows a crafted MSDOS partition table with an extended partition boot record at offset zero to cause memory consumption leading to a denial of service. The ...

CVE-2017-1134

CVE-2017-1134 describes a local privilege-escalation vulnerability in IBM Reliable Scalable Cluster Technology (RSC) shipped with IBM Tivoli System Automation for Multiplatforms (TSAMP). The issue allows a local attacker to gain root privileges. IBM references indicate affected TSAMP versions 4.1...

CVE-2024-56477

IBM Power Hardware Management Console (Power HMC) v10.3.1050.0 is affected by CVE-2024-56477, a path traversal (CWE-22) vulnerability where an authenticated user can view arbitrary files by sending a crafted URL containing /../. Affects HMC V10.3.1050.0; impact is high on confidentiality with no ...

CVE-2014-0883

The CVE-2014-0883 affects IBM Power HMC 7.1.0–7.8.0 and 7.3.5 . It is a cross-site scripting vulnerability that allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Remediation per IBM: upgrade to Power HMC 7.7.0 SP3 (MB03778...

CVE-2012-3296

CVE-2012-3296 describes a cross-site scripting (XSS) vulnerability in the Help link of the login panel on IBM Power Hardware Management Console (HMC). Affected software versions are IBM Power HMC 7R7.1.0 before SP4, 7R7.2.0 before SP2, and 7R7.3.0. The issue allows remote attackers to inject arbi...