Month: August 2023

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to run arbitrary commands on the underlying host. Successful exploitation of this … Continue reading CVE-2023-37427 (edgeconnect_sd-wan_orchestrator)→

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative&… Continue reading CVE-2023-37425 (edgeconnect_sd-wan_orchestrator)→

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestra… Continue reading CVE-2023-37429 (edgeconnect_sd-wan_orchestrator)→

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestra… Continue reading CVE-2023-37430 (edgeconnect_sd-wan_orchestrator)→

Multiple vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct SQL injection attacks against the EdgeConnect SD-WAN Orchestra… Continue reading CVE-2023-37431 (edgeconnect_sd-wan_orchestrator)→

Buffer Overflow vulnerability in Supermicro motherboard X12DPG-QR 1.4b allows local attackers to hijack control flow via manipulation of SmcSecurityEraseSetupVar variable. Continue reading CVE-2023-34853 (h11dsi-nt_firmware, h11dsi_firmware, h11dst-b_firmware, h11dsu-in_firmware, h12dgo-6_firmware, h12dgq-nt6_firmware, h12dsg-o-cpu_firmware, h12dsg-q-cpu6_firmware, h12dsi-n6_firmware, h12dsi-nt6_firmware, h12dst-b_firmware, h12dsu-in_firmware, h12dsu-inr_firmware, h12ssff-an6_firmware, h12ssfr-an6_firmware, h12ssg-an6_firmware, h12ssg-anp6_firmware, h12ssl-c_firmware, h12ssl-ct_firmware, h12ssl-i_firmware, h12ssl-nt_firmware, h12sst-ps_firmware, h12ssw-an6_firmware, h12ssw-in_firmware, h12ssw-inl_firmware, h12ssw-inr_firmware, h12ssw-nt_firmware, h12ssw-ntl_firmware, h12ssw-ntr_firmware, h13dsg-o-cpu-d_firmware, h13dsg-o-cpu_firmware, h13dsh_firmware, h13sae-mf_firmware, h13srd-f_firmware, h13ssf_firmware, h13ssh_firmware, h13ssl-n_firmware, h13ssl-nt_firmware, h13sst-g_firmware, h13sst-gc_firmware, h13ssw_firmware, x11dac_firmware, x11dai-n_firmware, x11ddw-l_firmware, x11ddw-nt_firmware, x11dgo-t_firmware, x11dgq_firmware, x11dpff-sn_firmware, x11dpfr-s_firmware, x11dpfr-sn_firmware, x11dpg-ot-cpu_firmware, x11dpg-qt_firmware, x11dpg-sn_firmware, x11dph-i_firmware, x11dph-t_firmware, x11dph-tq_firmware, x11dpi-n_firmware, x11dpi-nt_firmware, x11dpl-i_firmware, x11dps-re_firmware, x11dpt-b_firmware, x11dpt-bh_firmware, x11dpt-l_firmware, x11dpt-ps_firmware, x11dpu-v_firmware, x11dpu-x_firmware, x11dpu-xll_firmware, x11dpu-z+_firmware, x11dpu-ze+_firmware, x11dpu_firmware, x11dpx-t_firmware, x11dsc+_firmware, x11dsf-e_firmware, x11dsn-ts_firmware, x11dsn-tsq_firmware, x11opi-cpu_firmware, x11qph+_firmware, x11sae_firmware, x11sae_m_firmware, x11sat_firmware, x11sba_firmware, x11sca-f_firmware, x11sca-w_firmware, x11sca_firmware, x11scd-f_firmware, x11sch-f_firmware, x11sch-ln4f_firmware, x11scl-f_firmware, x11scl-if_firmware, x11scl-ln4f_firmware, x11scm-f_firmware, x11scm-ln8f_firmware, x11scw-f_firmware, x11sdd-18c-f_firmware, x11sdd-8c-f_firmware, x11sds-12c_firmware, x11sds-16c_firmware, x11sds-8c_firmware, x11spa-t_firmware, x11spa-tf_firmware, x11spg-tf_firmware, x11sph-nctf_firmware, x11sph-nctpf_firmware, x11spi-tf_firmware, x11spl-f_firmware, x11spm-f_firmware, x11spm-tf_firmware, x11spm-tpf_firmware, x11spw-ctf_firmware, x11spw-tf_firmware, x11sra_firmware, x11sri-if_firmware, x11srl-f_firmware, x11srm-f_firmware, x11srm-vf_firmware, x11srm_firmware, x11ssd-f_firmware, x11sse-f_firmware, x11ssh-ctf_firmware, x11ssh-f_firmware, x11ssh-gf-1585_firmware, x11ssh-gf-1585l_firmware, x11ssh-gtf-1585_firmware, x11ssh-gtf-1585l_firmware, x11ssh-ln4f_firmware, x11ssh-tf_firmware, x11ssi-ln4f_firmware, x11ssl-cf_firmware, x11ssl-f_firmware, x11ssl-nf_firmware, x11ssl_firmware, x11ssm-f_firmware, x11ssm_firmware, x11ssn_firmware, x11ssq_firmware, x11ssql_firmware, x11ssv-lvds_firmware, x11ssv-q_firmware, x11ssv_firmware, x11ssw-4tf_firmware, x11ssw-f_firmware, x11ssw-tf_firmware, x11ssz-f_firmware, x11ssz-tln4f_firmware, x11ssz_firmware, x12dai-n6_firmware, x12ddw-a6_firmware, x12dgo-6_firmware, x12dgq-r_firmware, x12dgu_firmware, x12dhm-6_firmware, x12dpd-a6m25_firmware, x12dpfr-an6_firmware, x12dpg-ar_firmware, x12dpg-oa6-gd2_firmware, x12dpg-oa6_firmware, x12dpg-qbt6_firmware, x12dpg-qr_firmware, x12dpg-qt6_firmware, x12dpg-u6_firmware, x12dpi-n6_firmware, x12dpi-nt6_firmware, x12dpl-i6_firmware, x12dpl-nt6_firmware, x12dpt-b6_firmware, x12dpt-pt46_firmware, x12dpt-pt6_firmware, x12dpu-6_firmware, x12dsc-6_firmware, x12qch+_firmware, x12sae-5_firmware, x12sae_firmware, x12sca-5f_firmware, x12sca-f_firmware, x12scq_firmware, x12scv-lvds_firmware, x12scv-w_firmware, x12scz-f_firmware, x12scz-qf_firmware, x12scz-tln4f_firmware, x12sdv-10c-sp6f_firmware, x12sdv-10c-spt4f_firmware, x12sdv-14c-spt8f_firmware, x12sdv-16c-spt8f_firmware, x12sdv-20c-spt8f_firmware, x12sdv-4c-sp6f_firmware, x12sdv-4c-spt4f_firmware, x12sdv-4c-spt8f_firmware, x12sdv-8c-sp6f_firmware, x12sdv-8c-spt4f_firmware, x12sdv-8c-spt8f_firmware, x12sdv-8ce-sp4f_firmware, x12spa-tf_firmware, x12sped-f_firmware, x12spg-nf_firmware, x12spi-tf_firmware, x12spl-f_firmware, x12spl-ln4f_firmware, x12spm-ln4f_firmware, x12spm-ln6tf_firmware, x12spm-tf_firmware, x12spo-f_firmware, x12spo-ntf_firmware, x12spt-g_firmware, x12spt-gc_firmware, x12spt-pt_firmware, x12spw-f_firmware, x12spw-tf_firmware, x12spz-ln4f_firmware, x12spz-spln6f_firmware, x12std-f_firmware, x12ste-f_firmware, x12sth-f_firmware, x12sth-ln4f_firmware, x12sth-sys_firmware, x12stl-f_firmware, x12stl-if_firmware, x12stn-c-wohs_firmware, x12stn-c_firmware, x12stn-e-wohs_firmware, x12stn-e_firmware, x12stn-h-wohs_firmware, x12stn-h_firmware, x12stn-l-wohs_firmware, x12stn-l_firmware, x12stw-f_firmware, x12stw-tf_firmware, x13dai-t_firmware, x13ddw-a_firmware, x13deg-oa_firmware, x13deg-oad_firmware, x13deg-pvc_firmware, x13deg-qt_firmware, x13dei-t_firmware, x13dei_firmware, x13dem_firmware, x13det-b_firmware, x13dgu_firmware, x13dsf-a_firmware, x13qeh+_firmware, x13sae-f_firmware, x13sae_firmware, x13san-c-wohs_firmware, x13san-c_firmware, x13san-e-wohs_firmware, x13san-e_firmware, x13san-h-wohs_firmware, x13san-h_firmware, x13san-l-wohs_firmware, x13san-l_firmware, x13saq_firmware, x13sav-lvds_firmware, x13sav-ps_firmware, x13saz-f_firmware, x13saz-q_firmware, x13sedw-f_firmware, x13seed-f_firmware, x13seed-sf_firmware, x13sefr-a_firmware, x13sei-f_firmware, x13sei-tf_firmware, x13sem-f_firmware, x13sem-tf_firmware, x13set-g_firmware, x13set-gc_firmware, x13sew-f_firmware, x13sew-tf_firmware, x13sra-tf_firmware, x13srn-e-wohs_firmware, x13srn-e_firmware, x13srn-h_firmware)→

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the in… Continue reading CVE-2023-37421 (edgeconnect_sd-wan_orchestrator)→

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the in… Continue reading CVE-2023-37422 (edgeconnect_sd-wan_orchestrator)→

A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to run arbitrary commands on the underlying host if certain preconditions outsid… Continue reading CVE-2023-37424 (edgeconnect_sd-wan_orchestrator)→

Vulnerabilities in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the in… Continue reading CVE-2023-37423 (edgeconnect_sd-wan_orchestrator)→