Filtered by vendor Hp
Subscribe
Total
2279 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-0712 | 1 Hp | 1 Software Update | 2017-08-07 | 6.8 MEDIUM | N/A |
Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and earlier allows remote attackers to execute arbitrary code or obtain sensitive information via unspecified vectors. NOTE: this might overlap CVE-2007-6513. | |||||
CVE-2008-0953 | 1 Hp | 1 Instant Support | 2017-08-07 | 10.0 HIGH | N/A |
The StartApp function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary programs via a .exe filename in the argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953. | |||||
CVE-2008-0952 | 1 Hp | 1 Instant Support | 2017-08-07 | 9.3 HIGH | N/A |
The AppendStringToFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to create files with arbitrary content via a full pathname in the first argument and the content in the second argument, a different vulnerability than CVE-2007-5608 and CVE-2008-0953. | |||||
CVE-2016-4387 | 1 Hp | 1 Keyview | 2017-07-29 | 6.8 MEDIUM | 8.1 HIGH |
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4388, CVE-2016-4389, and CVE-2016-4390. | |||||
CVE-2016-4384 | 1 Hp | 2 Loadrunner, Performance Center | 2017-07-29 | 9.0 HIGH | 8.6 HIGH |
HPE Performance Center before 12.50 and LoadRunner before 12.50 allow remote attackers to cause a denial of service via unspecified vectors. | |||||
CVE-2016-4386 | 1 Hp | 1 Network Automation | 2017-07-29 | 6.9 MEDIUM | 7.8 HIGH |
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors. | |||||
CVE-2016-4389 | 1 Hp | 1 Keyview | 2017-07-29 | 6.8 MEDIUM | 8.1 HIGH |
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4390. | |||||
CVE-2016-4388 | 1 Hp | 1 Keyview | 2017-07-29 | 6.8 MEDIUM | 8.1 HIGH |
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4389, and CVE-2016-4390. | |||||
CVE-2016-5995 | 3 Hp, Ibm, Linux | 5 Hp-ux, Aix, Db2 and 2 more | 2017-07-29 | 6.9 MEDIUM | 7.3 HIGH |
Untrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before FP8, and 11.1 GA on Linux, AIX, and HP-UX allows local users to gain privileges via a Trojan horse library that is accessed by a setuid or setgid program. | |||||
CVE-2016-4390 | 1 Hp | 1 Keyview | 2017-07-29 | 6.8 MEDIUM | 8.1 HIGH |
The Filter SDK in HPE KeyView 10.18 through 10.24 allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2016-4387, CVE-2016-4388, and CVE-2016-4389. | |||||
CVE-2007-6194 | 1 Hp | 1 Select Identity | 2017-07-28 | 10.0 HIGH | N/A |
Unspecified vulnerability in HP Select Identity 4.01 before 4.01.012 and 4.1x before 4.13.003 allows remote attackers to obtain unspecified access via unknown vectors. | |||||
CVE-2007-5607 | 1 Hp | 1 Instant Support | 2017-07-28 | 7.5 HIGH | N/A |
Buffer overflow in the RegistryString function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5606. | |||||
CVE-2007-5604 | 1 Hp | 1 Instant Support | 2017-07-28 | 7.5 HIGH | N/A |
Buffer overflow in the ExtractCab function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long first argument, a different vulnerability than CVE-2007-5605, CVE-2007-5606, and CVE-2007-5607. | |||||
CVE-2007-5608 | 1 Hp | 1 Instant Support | 2017-07-28 | 9.3 HIGH | N/A |
The DownloadFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to force a download of an arbitrary file onto a client machine via a URL in the first argument and a destination filename in the second argument, a different vulnerability than CVE-2008-0952 and CVE-2008-0953. | |||||
CVE-2007-5610 | 1 Hp | 1 Instant Support | 2017-07-28 | 10.0 HIGH | N/A |
The DeleteSingleFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to delete an arbitrary file via a full pathname in the argument. | |||||
CVE-2007-5605 | 1 Hp | 1 Instant Support | 2017-07-28 | 9.3 HIGH | N/A |
Buffer overflow in the GetFileTime function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5606, and CVE-2007-5607. | |||||
CVE-2007-5606 | 1 Hp | 1 Instant Support | 2017-07-28 | 10.0 HIGH | N/A |
Buffer overflow in the MoveFile function in the HPISDataManagerLib.Datamgr ActiveX control in HPISDataManager.dll in HP Instant Support before 1.0.0.24 allows remote attackers to execute arbitrary code via a long argument, a different vulnerability than CVE-2007-5604, CVE-2007-5605, and CVE-2007-5607. | |||||
CVE-2007-3729 | 1 Hp | 1 Openvms | 2017-07-28 | 5.0 MEDIUM | N/A |
The default configuration of the POP server in TCP/IP Services 5.6 for HP OpenVMS 8.3 generates different responses depending on whether or not a username is valid, which allows remote attackers to enumerate valid POP usernames. | |||||
CVE-2007-4241 | 2 Cisco, Hp | 2 Local Director, Hp-ux | 2017-07-28 | 10.0 HIGH | N/A |
Buffer overflow in ldcconn in Hewlett-Packard (HP) Controller for Cisco Local Director on HP-UX 11.11i allows remote attackers to execute arbitrary code via a long string to TCP port 17781. | |||||
CVE-2007-3260 | 1 Hp | 1 System Management Homepage | 2017-07-28 | 9.0 HIGH | N/A |
HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory members to the root group, which allows remote authenticated eDirectory users to gain privileges. |