Rezultati pretraživanja za 'Od datuma: 01.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-65213 | 6.6 | This issue may allow an IPMI authenticated administrator to execute commands as the operating system root user on the BMC | 2026-10-27 15:54:05 | 2026-10-27 09:16:34 |
| CVE-2026-65211 | 7.2 | This issue may allow an authenticated IPMI Administrator to read and write arbitrary BMC physical memory and thereby execute code on the BMC operating system. | 2026-10-27 15:54:05 | 2026-10-27 09:16:33 |
| CVE-2026-65220 | 8.8 | A logic flaw in the BMC IPMI implementation may allow an attacker to send specially crafted RAKP+ messages and escalate an account to administrator privileges. | 2026-10-27 15:54:05 | 2026-10-27 08:16:54 |
| CVE-2026-65219 | 7.4 | A flaw in the BMC RAKP+ implementation may allow an attacker to send a request followed by a specially crafted RAKP message and establish an RMCP+ session, which could then be used to execute commands. | 2026-10-27 15:54:05 | 2026-10-27 08:16:54 |
| CVE-2026-65210 | 4.9 | This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role. | 2026-10-27 15:54:05 | 2026-10-27 08:16:54 |
| CVE-2026-18451 | 3.1 | The HTML5 KVM-over-IP console authenticates with a token returned by the web interface. Weaknesses in token generation may allow an attacker to guess the session token and take control of the KVM session. | 2026-10-27 15:54:05 | 2026-10-27 08:16:53 |
| CVE-2026-18450 | 9.8 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session. | 2026-10-27 15:54:05 | 2026-10-27 08:16:53 |
| CVE-2026-18449 | 7.5 | The BMC does not correctly enforce integrity and encryption requirements for IPMI commands. An attacker may be able to craft packets that execute arbitrary commands on an active session. | 2026-10-27 15:54:05 | 2026-10-27 08:16:53 |
| CVE-2026-16521 | 7.2 | An OS command injection vulnerability exists because of insufficient input filtering. An attacker can inject a command payload into a BMC function; the payload may execute when the related service is restarted. | 2026-10-27 15:54:05 | 2026-10-27 08:16:53 |
| CVE-2026-109453 | 7.0 | Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally. | 2026-10-27 15:53:24 | 2026-10-13 19:18:33 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/13496
Zapisa po stranici: