CVE-2010-3011

CRLF injection vulnerability in HP System Management Homepage SMH before 6.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors...

CVE-2012-2012

HP System Management Homepage SMH before 7.1.1 does not have an off autocomplete attribute for unspecified form fields, which makes it easier for remote attackers to obtain access by leveraging an unattended workstation...

CVE-2013-2360

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2359...

CVE-2013-2361

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-4821

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors...

CVE-2012-2016

Unspecified vulnerability in HP System Management Homepage SMH before 7.1.1 allows local users to obtain sensitive information via unknown vectors...

CVE-2013-2362

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows local users to cause a denial of service via unknown vectors, aka ZDI-CAN-1676...

CVE-2013-2364

Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-2363

HP System Management Homepage SMH before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2356...

CVE-2013-2358

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2359, and CVE-2013-2360...

CVE-2013-2357

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2358, CVE-2013-2359, and CVE-2013-2360...

CVE-2013-2355

HP System Management Homepage SMH before 7.2.1 allows remote attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2012-5217...

CVE-2011-3846

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH 6.2.2.7 allows remote attackers to hijack the authentication of administrators for requests that create administrative accounts...

CVE-2010-2279

The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...

CVE-2010-3284

Unspecified vulnerability in HP System Management Homepage SMH before 6.2 allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-2015

Unspecified vulnerability in HP System Management Homepage SMH before 7.1.1 allows remote authenticated users to gain privileges and obtain sensitive information via unknown vectors...

CVE-2012-2013

Unspecified vulnerability in HP System Management Homepage SMH before 7.1.1 allows remote attackers to cause a denial of service, or possibly obtain sensitive information or modify data, via unknown vectors...

CVE-2012-2014

HP System Management Homepage SMH before 7.1.1 does not properly validate input, which allows remote authenticated users to have an unspecified impact via unknown vectors...

CVE-2013-2356

HP System Management Homepage SMH before 7.2.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2013-2363...

CVE-2013-2359

Unspecified vulnerability in HP System Management Homepage SMH before 7.2.1 allows remote authenticated users to cause a denial of service via unknown vectors, a different vulnerability than CVE-2013-2357, CVE-2013-2358, and CVE-2013-2360...