Filtered by vendor Hp
Subscribe
Total
2279 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2002-0836 | 3 Hp, Mandrakesoft, Redhat | 3 Secure Os, Mandrake Linux, Linux | 2016-10-17 | 7.5 HIGH | N/A |
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts. | |||||
CVE-2002-0711 | 1 Hp | 1 Trucluster Server | 2016-10-17 | 5.0 MEDIUM | N/A |
Unknown vulnerability in Cluster Interconnect for HP TruCluster Server 5.0A, 5.1, and 5.1A may allow local and remote attackers to cause a denial of service. | |||||
CVE-2002-0638 | 3 Hp, Mandrakesoft, Redhat | 5 Secure Os, Mandrake Linux, Mandrake Linux Corporate Server and 2 more | 2016-10-17 | 6.2 MEDIUM | N/A |
setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating systems, does not properly lock a temporary file when modifying /etc/passwd, which may allow local users to gain privileges via a complex race condition that uses an open file descriptor in utility programs such as chfn and chsh. | |||||
CVE-2002-0350 | 1 Hp | 1 Procurve Switch 4000m | 2016-10-17 | 7.8 HIGH | N/A |
HP Procurve Switch 4000M running firmware C.08.22 and C.09.09 allows remote attackers to cause a denial of service via a port scan of the management IP address, which disables the telnet service. | |||||
CVE-2002-0250 | 1 Hp | 7 Advancestack 10base-t Switching Hub J3200a, Advancestack 10base-t Switching Hub J3201a, Advancestack 10base-t Switching Hub J3202a and 4 more | 2016-10-17 | 7.5 HIGH | N/A |
Web configuration utility in HP AdvanceStack hubs J3200A through J3210A with firmware version A.03.07 and earlier, allows unauthorized users to bypass authentication via a direct HTTP request to the web_access.html file, which allows the user to change the switch's configuration and modify the administrator password. | |||||
CVE-2001-0552 | 2 Hp, Ibm | 2 Openview Network Node Manager, Tivoli Netview | 2016-10-17 | 10.0 HIGH | N/A |
ovactiond in HP OpenView Network Node Manager (NNM) 6.1 and Tivoli Netview 5.x and 6.x allows remote attackers to execute arbitrary commands via shell metacharacters in a certain SNMP trap message. | |||||
CVE-1999-1433 | 1 Hp | 1 Jetadmin | 2016-10-17 | 7.2 HIGH | N/A |
HP JetAdmin D.01.09 on Solaris allows local users to change the permissions of arbitrary files via a symlink attack on the /tmp/jetadmin.log file. | |||||
CVE-1999-1408 | 2 Hp, Ibm | 2 Hp-ux, Aix | 2016-10-17 | 2.1 LOW | N/A |
Vulnerability in AIX 4.1.4 and HP-UX 10.01 and 9.05 allows local users to cause a denial of service (crash) by using a socket to connect to a port on the localhost, calling shutdown to clear the socket, then using the same socket to connect to a different port on localhost. | |||||
CVE-1999-1139 | 1 Hp | 1 Hp-ux | 2016-10-17 | 7.2 HIGH | N/A |
Character-Terminal User Environment (CUE) in HP-UX 11.0 and earlier allows local users to overwrite arbitrary files and gain root privileges via a symlink attack on the IOERROR.mytty file. | |||||
CVE-1999-1163 | 1 Hp | 1 9000 | 2016-10-17 | 7.5 HIGH | N/A |
Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via the Service Support Processor (SSP) Teststation. | |||||
CVE-1999-1161 | 1 Hp | 1 Hp-ux | 2016-10-17 | 7.2 HIGH | N/A |
Vulnerability in ppl in HP-UX 10.x and earlier allows local users to gain root privileges by forcing ppl to core dump. | |||||
CVE-1999-1160 | 1 Hp | 1 Hp-ux | 2016-10-17 | 10.0 HIGH | N/A |
Vulnerability in ftpd/kftpd in HP-UX 10.x and 9.x allows local and possibly remote users to gain root privileges. | |||||
CVE-1999-0961 | 1 Hp | 1 Hp-ux | 2016-10-17 | 6.2 MEDIUM | N/A |
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation. | |||||
CVE-2016-4369 | 1 Hp | 1 Discovery And Dependency Mapping Inventory | 2016-08-23 | 6.5 MEDIUM | 8.8 HIGH |
HPE Discovery and Dependency Mapping Inventory (DDMi) 9.30, 9.31, 9.32, 9.32 update 1, 9.32 update 2, and 9.32 update 3 allows remote authenticated users to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library. | |||||
CVE-2016-4364 | 1 Hp | 1 Insight Control Server Deployment | 2016-08-23 | 7.2 HIGH | 8.4 HIGH |
HPE Insight Control server deployment allows local users to gain privileges via unspecified vectors. | |||||
CVE-2016-2030 | 1 Hp | 2 Matrix Operating Environment, Systems Insight Manager | 2016-08-23 | 5.5 MEDIUM | 8.1 HIGH |
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2017, CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, and CVE-2016-2022. | |||||
CVE-2016-2024 | 1 Hp | 2 Insight Contol, Server Migration Package | 2016-08-23 | 7.5 HIGH | 9.8 CRITICAL |
HPE Insight Control before 7.5.1 allow remote attackers to obtain sensitive information, modify data, or cause a denial of service via unspecified vectors. | |||||
CVE-2016-4362 | 1 Hp | 1 Insight Control Server Deployment | 2016-08-23 | 5.5 MEDIUM | 8.1 HIGH |
HPE Insight Control server deployment allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors. | |||||
CVE-2016-2017 | 1 Hp | 2 Matrix Operating Environment, Systems Insight Manager | 2016-08-23 | 5.5 MEDIUM | 8.1 HIGH |
HPE Systems Insight Manager (SIM) before 7.5.1 allows remote authenticated users to obtain sensitive information or modify data via unspecified vectors, a different vulnerability than CVE-2016-2019, CVE-2016-2020, CVE-2016-2021, CVE-2016-2022, and CVE-2016-2030. | |||||
CVE-2016-4367 | 1 Hp | 1 Universal Cmbd Foundation | 2016-08-23 | 5.0 MEDIUM | 7.5 HIGH |
The Universal Discovery component in HPE Universal CMDB 10.0, 10.01, 10.10, 10.11, 10.20, and 10.21 allows remote attackers to obtain sensitive information via unspecified vectors. |