Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
bmc vulnerabilities and exploits
(subscribe to this query)
7.2
CVSSv2
CVE-1999-1459
BMC PATROL Agent prior to 3.2.07 allows local users to gain root privileges via a symlink attack on a temporary file.
Bmc Patrol Agent 3.2
Bmc Patrol Agent 3.2.3
5
CVSSv2
CVE-2016-2349
Remedy AR System Server in BMC Remedy 8.1 SP 2, 9.0, 9.0 SP 1, and 9.1 allows malicious users to reset arbitrary passwords via a blank previous password.
Bmc Remedy Action Request System 9.1
Bmc Remedy Action Request System 9.0
Bmc Remedy Action Request System 8.1
6.5
CVSSv2
CVE-2018-18862
BMC Remedy Mid-Tier 7.1.00 and 9.1.02.003 for BMC Remedy AR System has Incorrect Access Control in ITAM forms, as demonstrated by TLS%3APLR-Configuration+Details/Default+Admin+View/, AST%3AARServerConnection/Default+Admin+View/, and AR+System+Administration%3A+Server+Information/...
Bmc Remedy Action Request System 9.1.02.003
Bmc Remedy Mid-tier 7.1.00
4
CVSSv2
CVE-2015-5071
AR System Mid Tier in the AR System Mid Tier component prior to 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary files via the __report parameter of the BIRT viewer servlet.
Bmc Remedy Ar System Server 8.0
Bmc Remedy Ar System Server 9.0
4
CVSSv2
CVE-2015-5072
The BIRT Engine servlet in the AR System Mid Tier component prior to 9.0 SP1 for BMC Remedy AR System Server allows remote authenticated users to "navigate" to arbitrary local files via the __imageid parameter.
Bmc Remedy Ar System Server 8.0
Bmc Remedy Ar System Server 9.0
NA
CVE-2022-42274
NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service or gain code execution.
Nvidia Bmc
NA
CVE-2022-42280
NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead to authentication bypass.
Nvidia Bmc
NA
CVE-2022-42282
NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may lead to information disclosure.
Nvidia Bmc
NA
CVE-2023-25507
NVIDIA DGX-1 BMC contains a vulnerability in the SPX REST API, where an attacker with the appropriate level of authorization can inject arbitrary shell commands, which may lead to code execution, denial of service, information disclosure, and data tampering.
Nvidia Bmc
NA
CVE-2023-34258
An issue exists in BMC Patrol prior to 22.1.00. The agent's configuration can be remotely queried. This configuration contains the Patrol account password, encrypted with a default AES key. This account can then be used to achieve remote code execution.
Bmc Patrol
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27975
CVE-2024-2961
CVE-2024-20380
XML injection
HTML injection
CVE-2024-29204
CVE-2023-51795
memory leak
CVE-2024-3470
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »