15678 matches found
(Pwn2Own) HP Color LaserJet Pro M479fdw msws Probe Message Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of Probe messages. The issue results from...
(Pwn2Own) HP Color LaserJet Pro M479fdw NotifyTo Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro M479fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of the NotifyTo element. The issue results from th...
HPESBUX04528 rev.1 - HP-UX PHP, Multiple Vulnerabilities
Potential Security Impact: Local: Access Restriction Bypass, Bypass Security Restrictions, Denial of Service DoS, Disclosure of Sensitive Information, memory corruption; Remote: Access Restriction Bypass, Bypass Security Restrictions, Code Execution, Denial of Service DoS, Disclosure of Sensitive...
Privilege escalation
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...
CVE-2022-4894
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element...
CVE-2022-4894
CVE-2022-4894 affects certain HP and Samsung Printer software packages, enabling elevation of privilege via Uncontrolled Search Path Element. The root cause is improper handling of search paths in printer software, allowing a local attacker with low privileges and user interaction to escalate rig...
Security Bulletin: IBM TXSeries for Multiplatforms Web Services is vulnerable to Slowloris attack which is a type of denial-of-service (DoS)
Summary IBM TXSeries for Multiplatforms Web Services is vulnerable to Slowloris attack which is a type of denial-of-service DoS. This issue has been addressed. Vulnerability Details CVEID:CVE-2023-38741 DESCRIPTION: IBM TXSeries for Multiplatforms is vulnerable to a denial of service, caused by...
HP Printer Software Elevation of Privilege (HPSBPI03857)
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C...
AMD® Ryzen Master™ SDK February 2023 Security Update
AMD has informed HP of a potential security vulnerability identified in the AMD® Ryzen Master™ Monitoring SDK, which might allow escalation of privilege. AMD has released software to mitigate the potential vulnerability. AMD has released updates to mitigate the potential vulnerability. HP has...
AMD Client UEFI Firmware August 2023 Security Update
AMD has informed HP of a potential security vulnerability identified in some AMD client platform firmware components, which might allow arbitrary code execution. AMD is releasing firmware updates to mitigate these vulnerabilities. AMD has released updates to mitigate the potential vulnerability. ...
Intel® Unite® Hub Software August 2023 Security Update
Intel has informed HP of a potential vulnerability identified in the Intel® Unite® Hub software, which may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has...
Intel 2023.3 IPU – Chipset Firmware August 2023 Security Update
Intel has informed HP of potential vulnerabilities identified in the Intel® Converged Security Management Engine CSME, Active Management Technology AMT, and Intel® Standard Manageability software that might allow escalation of privilege or denial of service. Intel is releasing updates to mitigate...
Intel® PROSet/Wireless WiFi and Killer™ WiFi August 2023 Security Update
Intel has informed HP of potential vulnerabilities identified in some Intel® PROSet/Wireless WiFi and Killer™ WiFi products, which might allow escalation of privilege or denial of service. Intel is releasing firmware and software updates to mitigate these potential vulnerabilities. Intel has...
Certain HP and Samsung printer software - Potential elevation of privileges
Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element. Update the printer software...
HP Printer Elevation of Privilege and/or Information Disclosure Vulnerability (HPSBPI03855)
Multiple HP printer are prone to elevation of privilege and information disclosure vulnerabilities related to a lack of authentication with certain endpoints. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
CVE-2023-26301
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints...
CVE-2023-26301
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints...
Information disclosure
Certain HP LaserJet Pro print products are potentially vulnerable to an Elevation of Privilege and/or Information Disclosure related to a lack of authentication with certain endpoints...
CVE-2023-26301
Summary: CVE-2023-26301 affects certain HP LaserJet Pro print products due to a lack of authentication on specific endpoints, enabling elevation of privilege and/or information disclosure. This is documented across multiple sources (NVD/NVD-HP/Red Hat) with a critical CVSS v3.1 score (9.8) and ne...