15693 matches found
HP System Management Homepage < 7.2.6 Multiple Vulnerabilities (FREAK)
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.2.6. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several components and third-party libraries : - HP...
HP Network Automation 9.22.0x / 10.00.0x < 10.00.02 Multiple RCE
The HP Network Automation application running on the remote host is version 9.22.0x or version 10.00.0x prior to 10.00.02. It is, therefore, affected by multiple remote code execution vulnerabilities due to multiple unspecified flaws. A remote attacker can exploit these issues to execute arbitrar...
VulnCheck KEV: CVE-2013-4810
HP ProCurve Manager PCM, PCM+, Identity Driven Manager IDM, and Application Lifecycle Management allow remote attackers to execute arbitrary code via a marshalled object to 1 EJBInvokerServlet or 2 JMXInvokerServlet...
HP Operations Orchestration 10.x < 10.51 Java Object Deserialization RCE
The version of HP Operations Orchestration installed on the remote host is 10.x prior to 10.51. It is, therefore, affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collections ACC library. An unauthenticated,...
HP Operations Orchestration Arbitrary Code Execution Vulnerability
HP Operations Orchestration is an operations manual automation platform that automates client device and data center infrastructure changes and deployments. A security vulnerability exists in the ACC that handles deserialization of Java objects in versions prior to HP Operations Orchestration...
HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03546)
HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2016 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
HPSBGN3547 rev.2 - HP Device Manager, Remote Read Access to Arbitrary Files
Potential Security Impact Remote read access to arbitrary files. Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the...
Lynis 2.2.0 - Security Auditing Tool for Unix/Linux Systems
Lynis is an open source security auditing tool. Commonly used by system administrators, security professionals and auditors, to evaluate the security defenses of their Linux/Unix based systems. It runs on the host itself, so it can perform very extensive security scans. Supported operating system...
CVE-2016-2245
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...
CVE-2016-2245
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...
Authentication flaw
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...
CVE-2016-2245
HP Support Assistant before 8.1.52.1 allows remote attackers to bypass authentication via unspecified vectors...
CVE-2016-2245
HP Support Assistant prior to 8.1.52.1 contains an authentication bypass vulnerability (CVE-2016-2245). Remote attackers could bypass authentication via unspecified vectors. Impact per sources indicates high confidentiality/integrity/availability concerns (CVSS v3 base score 9.8, critical). HP ha...
HP System Management Homepage Data Modification Vulnerability (CNVD-2016-01741)
HP System Management Homepage is a Web-based interface published by HP. A security vulnerability exists in HP System Management Homepage that could be exploited by a remote attacker to submit a special request to access or modify data on the system...
HP LaserJet Printers Unspecified Information Disclosure (HPSBPI03546)
According to its model number and firmware revision, the remote HP LaserJet printer is affected by an unspecified information disclosure vulnerability. An unauthenticated, remote attacker can exploit this vulnerability to obtain sensitive information via unspecified vectors. C Tenable Network...
HP OfficeJet Printers Unspecified Information Disclosure (HPSBPI03546)
According to its model number and firmware revision, the remote HP OfficeJet printer is affected by an unspecified information disclosure vulnerability. An unauthenticated, remote attacker can exploit this vulnerability to obtain sensitive information via unspecified vectors. C Tenable Network...
HP Operations Manager i Apache Flex BlazeDS External Entity Injection Vulnerability
The remote HP Operations Manager i host is affected by an XML external entity XXE vulnerability in the bundled version of Apache Flex BlazeDS due to an incorrectly configured XML parser accepting XML external entities from an untrusted source. A remote attacker can exploit this, via a specially...
CVE-2016-2244
HP LaserJet printers and MFPs and OfficeJet Enterprise printers with firmware before 3.7.01 allow remote attackers to obtain sensitive information via unspecified vectors...