15723 matches found
CVE-2014-2633
Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-2632
Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...
CVE-2013-6222
CVE-2013-6222 affects HP Service Manager (SM) Mobility Web Client and Service Request Catalog components. The XSS vulnerability exists in SM versions 7.21 and 9.x before 9.34, allowing remote attackers to inject arbitrary script/HTML via unspecified vectors. The HP security bulletin (HPSBMU03079)...
CVE-2014-2634
HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...
CVE-2014-2632
HP Service Manager CVE-2014-2632 affects the WebTier component across SM 7.21 and SM 9.x up to 9.33, allowing remote code execution via unknown vectors. The HP security bulletin HPSBMU03079 rev.1 documents an increase of privilege and other vulnerabilities impacting WebTier, with CVSSv2 base scor...
CVE-2014-2633
The CVE-2014-2633 issue affects HP Service Manager (SM) Server components in HP SM 7.21 and SM 9.x up to before 9.34. The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow an attacker to hijack user authentication via unspecified vectors. HP’s Security Bulletin HPSBMU03079 rev...
CVE-2014-2629
HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...
Design/Logic Flaw
HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...
CVE-2014-2629
The CVE-2014-2629 issue affects HP NonStop Safeguard Security Software G and the J/K release branches (G: H06.03–H06.28.01; J: J06.03–J06.17.01). The vulnerability arises from improper evaluation of the DISKFILE-PATTERN ACL on a program object file, allowing remote authenticated users to bypass i...
CVE-2014-2629
HP NonStop Safeguard Security Software G, H06.03 through H06.28.01, and J06.03 through J06.17.01 does not properly evaluate the DISKFILE-PATTERN ACL of a program object file, which allows remote authenticated users to bypass intended restrictions on program access via vectors related to...
CVE-2014-2630
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors...
Code injection
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors...
CVE-2014-2630
CVE-2014-2630 affects HP Glance/Performance Monitoring xglance-bin (HP Operations Agent 11.00). Vulnerable code path due to insecure RPATH (-L/lib64) used by SetUID/SetGID binaries, enabling local privilege escalation to root. Impact described as privilege escalation; fixed version HPSBMU03086 re...
CVE-2014-2630
Unspecified vulnerability in HP Operations Agent 11.00, when Glance is used, allows local users to gain privileges via unknown vectors...
CVE-2014-2631
Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...
CVE-2014-2628
Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...
Code injection
Unspecified vulnerability in HP Enterprise Maps 1 allows remote authenticated users to obtain sensitive information via unknown vectors...
Code injection
Unspecified vulnerability in HP Application Lifecycle Management aka Quality Center 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138...
CVE-2014-2631
CVE-2014-2631 affects HP Application Lifecycle Management / Quality Center 11.5x and 12.0x. The root cause is a DLL planting elevation-of-privilege flaw in ACLs on a specific installed directory, enabling a remote attacker with an unprivileged account to place a malicious DLL and trigger code exe...