Filtered by vendor Hp
Subscribe
Total
2279 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2011-0265 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 10.0 HIGH | N/A |
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long data_select1 parameter. | |||||
CVE-2011-0266 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 10.0 HIGH | N/A |
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long nameParams parameter, a different vulnerability than CVE-2011-0267.2. | |||||
CVE-2010-4107 | 1 Hp | 8 9000, Color Laserjet Mfp, Laserjet 4100 and 5 more | 2017-08-16 | 7.8 HIGH | N/A |
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack. | |||||
CVE-2011-0272 | 1 Hp | 1 Loadrunner | 2017-08-16 | 10.0 HIGH | N/A |
Unspecified vulnerability in HP LoadRunner 9.52 allows remote attackers to execute arbitrary code via network traffic to TCP port 5001 or 5002, related to the HttpTunnel feature. | |||||
CVE-2011-0271 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 10.0 HIGH | N/A |
The CGI scripts in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 do not properly validate an unspecified parameter, which allows remote attackers to execute arbitrary commands by using a command string for this parameter's value, related to a "command injection vulnerability." | |||||
CVE-2011-0267 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 10.0 HIGH | N/A |
Multiple buffer overflows in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allow remote attackers to execute arbitrary code via a long (1) schdParams or (2) nameParams parameter, a different vulnerability than CVE-2011-0266. | |||||
CVE-2011-0270 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 10.0 HIGH | N/A |
Format string vulnerability in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via format string specifiers in input data that involves an invalid template name. | |||||
CVE-2011-0269 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 10.0 HIGH | N/A |
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long schd_select1 parameter. | |||||
CVE-2011-0268 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 10.0 HIGH | N/A |
Buffer overflow in nnmRptConfig.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long text1 parameter. | |||||
CVE-2010-4030 | 1 Hp | 1 Insight Control Performance Management | 2017-08-16 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |||||
CVE-2010-4031 | 1 Hp | 1 Insight Control Performance Management | 2017-08-16 | 8.0 HIGH | N/A |
Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors. | |||||
CVE-2010-4032 | 1 Hp | 1 Insight Control Performance Management | 2017-08-16 | 6.8 MEDIUM | N/A |
Cross-site request forgery (CSRF) vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. | |||||
CVE-2010-3289 | 1 Hp | 1 Systems Insight Manager | 2017-08-16 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | |||||
CVE-2010-3290 | 1 Hp | 1 Systems Insight Manager | 2017-08-16 | 6.5 MEDIUM | N/A |
Unspecified vulnerability in HP Systems Insight Manager (SIM) before 6.2 allows remote authenticated users to gain privileges via unknown vectors. | |||||
CVE-2010-0443 | 1 Hp | 2 Openvms, Openvms Rms | 2017-08-16 | 6.8 MEDIUM | N/A |
Unspecified vulnerability in Record Management Services (RMS) before VMS83A_RMS-V1100 for HP OpenVMS on the Alpha platform allows local users to gain privileges via unknown vectors. | |||||
CVE-2010-2709 | 1 Hp | 1 Openview Network Node Manager | 2017-08-16 | 9.3 HIGH | N/A |
Stack-based buffer overflow in webappmon.exe in HP OpenView Network Node Manager (OV NNM) 7.51 and 7.53 allows remote attackers to execute arbitrary code via a long OvJavaLocale value in a cookie. | |||||
CVE-2010-1033 | 1 Hp | 1 Operations Manager | 2017-08-16 | 9.3 HIGH | N/A |
Multiple stack-based buffer overflows in a certain Tetradyne ActiveX control in HP Operations Manager 7.5, 8.10, and 8.16 might allow remote attackers to execute arbitrary code via a long string argument to the (1) LoadFile or (2) SaveFile method, related to srcvw32.dll and srcvw4.dll. | |||||
CVE-2010-1586 | 1 Hp | 1 System Management Homepage | 2017-08-16 | 4.3 MEDIUM | N/A |
Open redirect vulnerability in red2301.html in HP System Management Homepage (SMH) 2.x.x.x allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the RedirectUrl parameter. | |||||
CVE-2010-1558 | 2 Hp, Microsoft | 2 Multifunction Peripheral Digital Sending Software, Windows | 2017-08-16 | 4.7 MEDIUM | N/A |
Unspecified vulnerability in HP Multifunction Peripheral (MFP) Digital Sending Software before 4.18.3 allows local users to bypass intended restrictions on the MFP "Send to e-mail" feature, and obtain sensitive information, via unknown vectors. | |||||
CVE-2010-2711 | 2 Apple, Hp | 2 Ipad, Magcloud | 2017-08-16 | 6.4 MEDIUM | N/A |
Unspecified vulnerability in the HP MagCloud app before 1.0.5 for the iPad allows remote attackers to read and modify MagCloud application data via unknown vectors. |