Intel DCG
22 kredili kayıt · son 12 ayda 0 · 0 tanesi CISA KEV’de
Adlar CNA kayıtlarındaki serbest metindir; aynı kişi farklı yazımlarla ayrı görünebilir. Düzeltme için bize yazın.
Bu ad yeni bir CVE'de kredilendirildiğinde haber alın
Kendi adınızsa kayıtlarınızı izlemenin en kolay yolu: yeni kayıt yayımlandığında günlük e-posta özetinde bildiririz.
Kredili kayıtlar
Araştırmacılar| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-4344İstismar yok | Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connectionbroadcom · raid controller web interface · CWE-331 | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
30İzleyin | CVE-2023-4343İstismar yok | Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameterbroadcom · raid controller web interface | Yüksek7,5 | — | %0,5 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4342İstismar yok | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policybroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4341İstismar yok | Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUIbroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4340İstismar yok | Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log filebroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
30İzleyin | CVE-2023-4339İstismar yok | Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissionsbroadcom · raid controller web interface | Yüksek7,5 | — | %0,8 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4338İstismar yok | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headersbroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4337İstismar yok | Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installationbroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4336İstismar yok | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attributebroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
30İzleyin | CVE-2023-4335İstismar yok | Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linuxbroadcom · raid controller web interface · CWE-306 | Yüksek7,5 | — | %0,5 | 15 Ağu 2023 |
30İzleyin | CVE-2023-4334İstismar yok | Broadcom RAID Controller Web server (nginx) is serving private files without any authenticationbroadcom · raid controller web interface · CWE-306 | Yüksek7,5 | — | %0,6 | 15 Ağu 2023 |
22İzleyin | CVE-2023-4333İstismar yok | Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by serverbroadcom · raid controller web interface · CWE-326 | Orta5,5 | — | %0,1 | 15 Ağu 2023 |
30İzleyin | CVE-2023-4332İstismar yok | Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log filebroadcom · raid controller web interface · CWE-732 | Yüksek7,5 | — | %0,5 | 15 Ağu 2023 |
30İzleyin | CVE-2023-4331İstismar yok | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocolsbroadcom · raid controller web interface · CWE-327 | Yüksek7,5 | — | %0,3 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4329İstismar yok | Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attribbroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
22İzleyin | CVE-2023-4328İstismar yok | Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linuxbroadcom · raid controller web interface · CWE-522 | Orta5,5 | — | %0,1 | 15 Ağu 2023 |
22İzleyin | CVE-2023-4327İstismar yok | Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linuxbroadcom · raid controller web interface · CWE-522 | Orta5,5 | — | %0,1 | 15 Ağu 2023 |
30İzleyin | CVE-2023-4326İstismar yok | Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuitesbroadcom · raid controller web interface · CWE-327 | Yüksek7,5 | — | %0,3 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4325İstismar yok | Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilitiesbroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4324İstismar yok | Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headersbroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
39İzleyin | CVE-2023-4323İstismar yok | Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setupbroadcom · raid controller web interface | Kritik9,8 | — | %0,7 | 15 Ağu 2023 |
26İzleyin | CVE-2023-4345İstismar yok | Broadcom RAID Controller web interface is vulnerable client-side control bypassbroadcom · raid controller web interface | Orta6,5 | — | %0,5 | 15 Ağu 2023 |
- CVE-2023-434439İzleyin
Broadcom RAID Controller web interface is vulnerable to insufficient randomness due to improper use of ssl.rnd to setup CIM connection
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-434330İzleyin
Broadcom RAID Controller web interface is vulnerable due to exposure of sensitive password information in the URL as a URL search parameter
YüksekCVSS 7,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-434239İzleyin
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP strict-transport-security policy
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-434139İzleyin
Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-434039İzleyin
Broadcom RAID Controller is vulnerable to Privilege escalation by taking advantage of the Session prints in the log file
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433930İzleyin
Broadcom RAID Controller web interface is vulnerable to exposure of private keys used for CIM stored with insecure file permissions
YüksekCVSS 7,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433839İzleyin
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not provide X-Content-Type-Options Headers
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433739İzleyin
Broadcom RAID Controller web interface is vulnerable to improper session handling of managed servers on Gateway installation
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433639İzleyin
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard cookies with Secure attribute
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433530İzleyin
Broadcom RAID Controller Web server (nginx) is serving private server-side files without any authentication on Linux
YüksekCVSS 7,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433430İzleyin
Broadcom RAID Controller Web server (nginx) is serving private files without any authentication
YüksekCVSS 7,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433322İzleyin
Broadcom RAID Controller web interface doesn’t enforce SSL cipher ordering by server
OrtaCVSS 5,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433230İzleyin
Broadcom RAID Controller web interface is vulnerable due to Improper permissions on the log file
YüksekCVSS 7,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-433130İzleyin
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that support obsolete and vulnerable TLS protocols
YüksekCVSS 7,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-432939İzleyin
Broadcom RAID Controller web interface is vulnerable due to insecure default of HTTP configuration that does not safeguard SESSIONID cookie with SameSite attrib
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-432822İzleyin
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
OrtaCVSS 5,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-432722İzleyin
Broadcom RAID Controller web interface is vulnerable to exposure of sensitive data and the keys used for encryption are accessible to any local user on Linux
OrtaCVSS 5,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-432630İzleyin
Broadcom RAID Controller web interface is vulnerable has an insecure default TLS configuration that supports obsolete SHA1-based ciphersuites
YüksekCVSS 7,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-432539İzleyin
Broadcom RAID Controller web interface is vulnerable due to usage of Libcurl with LSA has known vulnerabilities
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-432439İzleyin
Broadcom RAID Controller web interface is vulnerable due to insecure defaults of lacking HTTP Content-Security-Policy headers
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-432339İzleyin
Broadcom RAID Controller web interface is vulnerable to improper session management of active sessions on Gateway setup
KritikCVSS 9,8İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023
- CVE-2023-434526İzleyin
Broadcom RAID Controller web interface is vulnerable client-side control bypass
OrtaCVSS 6,5İstismar yokEPSS %0broadcom · raid controller web interface15 Ağu 2023