15723 matches found
HP Network Node Manager I PMD Buffer Overflow
No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = NormalRanking include Msf::Exploit::Remote::Udp def initializeinfo =...
HP Printers Security Bypass (HPSBPI03107)
The remote HP printer is affected by a security bypass vulnerability. The included OpenSSL library has a security bypass flaw in the handshake process. By using a specially crafted handshake, a remote attacker can force the use of weak keying material. This could be leveraged for a...
HP OfficeJet Printer Security Bypass (HPSBPI03107)
The remote HP OfficeJet printer is affected by a security bypass vulnerability. The included OpenSSL library has a security bypass flaw in the handshake process. By using a specially crafted handshake, a remote attacker can force the use of weak keying material. This could be leveraged for a...
HP System Management Homepage < 7.4 Multiple Vulnerabilities
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is affected by the following vulnerabilities : - A flaw exists within the included cURL that disables the 'CURLOPTSSLVERIFYHOST' check when the setting on 'CURLOPTSSLVERIFYPEER' ...
HP Systems Insight Manager < 7.4 Multiple Vulnerabilities
The version of HP Systems Insight Manager installed on the remote Windows host is affected by the following vulnerabilities : - An unspecified vulnerability exists that allows a remote authenticated attacker to gain limited elevated privileges. CVE-2014-2643 - A vulnerability exists that allows...
CVE-2014-2644
Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
CVE-2014-2644
HP Systems Insight Manager (SIM) prior to version 7.4 on Linux/Windows is affected by CVE-2014-2644: a cross-site scripting (XSS) vulnerability allowing remote attackers to inject arbitrary scripts/HTML via unknown vectors. The CVSS v2 base score is 4.3 (I: Partial; AV:N/AC:M/Au:N). Remediation: ...
CVE-2014-2644
Cross-site scripting XSS vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...
HP Data Protector Opcode 1091 Directory Traversal (CVE-2014-5160)
A directory traversal vulnerability exists in HP Data Protector. The vulnerability is due to a lack of input sanitization allowing an attacker to create arbitrary files. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...
CVE-2014-2645
HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...
CVE-2014-2643
Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...
Code injection
Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...
Code injection
HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...
CVE-2014-2645
HP Systems Insight Manager SIM before 7.4 allows remote attackers to conduct clickjacking attacks via unknown vectors...
CVE-2014-2643
Unspecified vulnerability in HP Systems Insight Manager SIM before 7.4 allows remote authenticated users to gain privileges via unknown vectors...
CVE-2014-2643
HP Systems Insight Manager (SIM) before version 7.4 is affected by CVE-2014-2643, an unspecified vulnerability that allows remote authenticated privilege elevation. The issue is documented in HP’s security bulletin HPSBMU03118 rev.1 and is referenced in multiple feeds (NVD entry CVE-2014-2643, Ne...
CVE-2014-2645
CVE-2014-2645 concerns HP Systems Insight Manager (SIM) prior to 7.4, where a remote attacker can induce a clickjacking vulnerability. The HP security bulletin notes SIM v7.4 as the remediation (software updates for Linux/Windows), addressing the issue alongside related vulnerabilities (e.g., XSS...
[security bulletin] HPSBST02958 rev.1 - HP MPIO Device Specific Module Manager, Local Execution of Arbitrary Code with Privilege Elevation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04048122 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04048122 Version: 1 HPSBST02958 rev....
[security bulletin] HPSBMU03118 rev.1 - HP Systems Insight Manager (SIM) on Linux and Windows, Multiple Remote Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04468121 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04468121 Version: 1 HPSBMU03118 rev....