EUVD-2012-5121

Malware in sbrugna...

PT-2015-7118

Name of the Vulnerable Software and Affected Versions HP ArcSight Logger version 6.0.0.7307.1 HP ArcSight Command Center version 6.8.0.1896.0 HP ArcSight Connector Appliance version 6.4.0.6881.3 Description The issue allows local users to potentially gain privileges by leveraging access to the...

CVE-2015-6030: Undefined Security Weakness

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access...

PT-2013-1765

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions prior to 6.3 HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote attackers to obtain sensitive information via unknown vectors. Recommendations For HP ArcSight Connector...

CVE-2012-5199: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors...

PT-2013-1766

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions 6.3 and earlier HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote authenticated users to execute arbitrary code. The exact vectors used for exploitation are not specified...

CVE-2012-3286: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

PT-2013-1592

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions 6.3 and earlier HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service. The exact...

CVE-2012-5198: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2011-0770

Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...

CVE-2011-2779: Undefined Security Weakness

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...

CVE-2011-0770: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 allows remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file...

PT-2011-2619

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions prior to 6.1 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the Windows XP variable in a file. This could potentially lead to...

PT-2011-4083

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions prior to 6.1 Description The issue concerns the Windows Event Log SmartConnector in HP ArcSight Connector Appliance, where it uses world-writable permissions for exported report files. This allows local...