Code injection

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2336...

Code injection

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344...

Code injection

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2343...

CVE-2014-4661

CVE-2014-4661: HP Records Manager is affected by a remote XSS in HP Records Manager 7.3.5 and 8.x up to 8.1 Patch 3. HP notes that HP Records Manager v8.1 Patch 3 and v7.3.5 (and earlier) are impacted; the vulnerability allows remote injection of script/HTML via unspecified vectors. Remediation p...

CVE-2014-4661

Cross-site scripting XSS vulnerability in HP Records Manager before 7.3.5 and 8.x before 8.1 Patch 3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2648

CVE-2014-2648 affects HP Operations Manager for UNIX versions 9.10 and 9.11, with a remote code execution vulnerability reported by HP/HP Security Bulletin HPSBMU03127. The exact attack vectors are not detailed in the provided documents, but the vulnerability allows an unauthenticated remote atta...

CVE-2014-2649

HP Operations Manager for UNIX (HP-UX) versions 9.10, 9.11 and 9.20 are identified as affected by CVE-2014-2649, a remote code execution vulnerability. The vulnerability is described as unspecified in vectors, enabling an unauthenticated attacker to execute arbitrary code on a remote host. HP’s s...

CVE-2014-2636

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2336...

CVE-2014-2635

Summary: The HP Sprinter vulnerability CVE-2014-2635 (and related CVEs) is a memory corruption/remote code execution issue found in the Tidestone Formula One ActiveX controls shipped with HP Sprinter. The concrete entry details a flaw in the SwapTables method (TTF16.ocx) that can be exploited to ...

CVE-2014-2646

Unspecified vulnerability in HP Network Automation 9.10 and 9.20 allows local users to bypass intended access restrictions via unknown vectors...

CVE-2014-2637

HP Sprinter 12.01 is affected by CVE-2014-2637 due to a CopyRange/CopyRangeEx memory corruption vulnerability in the Tidestone Formula One ActiveX controls (TTF16.ocx). The ZDI advisory states this allows remote code execution when a vulnerable installation visits a malicious page or opens a mali...

CVE-2014-2646

Technical details about CVE-2014-2646 are not publicly available in the provided documents. Monitor for updates.

CVE-2014-2648

Unspecified vulnerability in HP Operations Manager 9.10 and 9.11 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2637

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2342...

CVE-2014-2649

Unspecified vulnerability in HP Operations Manager 9.20 on UNIX allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2635

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2343...

CVE-2014-2638

Unspecified vulnerability in HP Sprinter 12.01 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2344...

CVE-2014-2636

HP Sprinter 12.01 is affected by CVE-2014-2636 (ZDI-2336) through a memory corruption flaw in the TTF16.ocx AttachToSS control that can allow remote code execution. Exploitation requires user interaction (e.g., visiting a malicious page/file). Impact is remote code execution with the context of t...

CVE-2014-2638

HP Sprinter 12.01 is affected by a remote code execution vulnerability in the Tidestone Formula One ActiveX controls (TTF16.ocx). The root cause is a memory corruption flaw caused by assigning an overly long value to the DefaultFontName property, allowing an attacker to execute arbitrary code in ...

PT-2014-4852 · Hewlett Packard · Hp Operations Manager

Name of the Vulnerable Software and Affected Versions: HP Operations Manager versions 9.10 through 9.11 on UNIX Description: The issue allows remote attackers to execute arbitrary code. The exact vectors used for the attack are not specified. Recommendations: For HP Operations Manager versions 9....