CVE-2013-6188

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6209

Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2013-6206

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

Code injection

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Code injection

Unspecified vulnerability in HP System Management Homepage SMH before 7.3 allows remote attackers to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2013-6205

CVE-2013-6205 affects HP Rapid Deployment Pack (RDP) and HP Insight Control Server Deployment. The HP security bulletin (HPSBGN02970 rev.1) documents multiple remote vulnerabilities impacting confidentiality, integrity, and availability, with CVE-2013-6205 rated CVSS 2.0 base score 4.1 (AV:L/AC:M...

CVE-2013-6209

Unspecified vulnerability in rpc.lockd in the NFS subsystem in HP HP-UX B.11.11 and B.11.23 allows remote attackers to cause a denial of service via unknown vectors...

CVE-2013-4846

Unspecified vulnerability in HP System Management Homepage SMH before 7.3 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2013-6188

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 7.1 through 7.2.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2013-6188

HP System Management Homepage (SMH) versions 7.1–7.2.2 are affected by a cross-site request forgery (CSRF) vulnerability that could allow remote attackers to hijack an authenticated session via unknown vectors. HP’s security bulletin notes this alongside a related CVE (CVE-2013-4846 for info disc...

CVE-2013-4846

HP System Management Homepage (SMH) before version 7.3 is affected by an information-disclosure vulnerability (CVE-2013-4846) that could be exploited remotely to obtain sensitive information. The issue is described as an unspecified information disclosure vulnerability; HP’s security bulletin HPS...

CVE-2013-6206

HP Rapid Deployment Pack (RDP) and HP Insight Control Server Deployment are affected by CVE-2013-6206. The vulnerability enables remote attackers to obtain sensitive information, modify data, or trigger a denial of service via unknown vectors. CVSS v2 base score is 9.0 (HIGH) with Network attack ...

CVE-2013-6206

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows remote attackers to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6205

Unspecified vulnerability in HP Rapid Deployment Pack RDP and Insight Control Server Deployment allows local users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2013-6209

CVE-2013-6209 affects HP-UX rpc.lockd in HP-UX B.11.11 and B.11.23, enabling remote DoS as described in HP bulletin HPSBUX02976. HP patched the issue with PHNE_43577 (B.11.11) and PHNE_43706 (B.11.23); affected components include NFS.rpc.lockd and related NFS subsystems. The HP advisory confirms ...

KLA10194 SB vulnerability in HP SMH

CSRF vulnerability was found in the HP SMH. By exploiting this vulnerability malicious users can hijack auth. This vulnerability can be exploited from remote by unknown vectors. Original advisories - Related products HP-System-Management-Homepage CVE list CVE-2013-6188 high Solution Update to...

KLA10193 OSI vulnerability in HP SMH

An unspecified vulnerability was found in HP SMH. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely by unknown vectors. Original advisories - Related products HP-System-Management-Homepage CVE list CVE-2013-4846 warning...

Charitable Prelude to Pwn2Own Not Without Its Critics

VANCOUVER – The prelude to the annual Pwn2Own contest between sponsor HP’s Zero Day Initiative and Pwnium contest sponsor Google produced not only zero-day exploits for Internet Explorer and Safari, but some skepticism about whether the exploits and details on the vulnerabilities were held for th...