2206 matches found
CVE-2010-3992
HP Insight Control Server Migration for Windows, before v6.2, contains a vulnerability (CVE-2010-3992) that could allow remote authenticated users to gain privileges. The HP security bulletin for SSRT100316 rev.1 rates CVE-2010-3992 with a base CVSS v2.0 vector of AV:N/AC:L/Au:S/C:P/I:C/A:P and a...
CVE-2010-3991
CVE-2010-3991 concerns HP Insight Control Server Migration for Windows prior to v6.2. The vulnerability is a remote cross-site scripting (XSS) flaw in the product’s web interface, allowing an attacker to inject arbitrary web script or HTML via unspecified vectors. The affected component is HP Ins...
CVE-2010-3989
HP Insight Control Virtual Machine Management for Windows is affected by CVE-2010-3989: a CSRF vulnerability allows remote attackers to hijack user sessions in installations prior to version 6.2. The issue affects HP Insight Control VM management before 6.2, with the payload described in HP secur...
CVE-2010-3993
HP Insight Control Server Migration for Windows (HP) is affected by CVE-2010-3993 and is vulnerable prior to version 6.2. The HP security bulletin and CVSS data describe a remote vulnerability that could lead to unauthorized access and data modification, with base score 6.4 (MEDIUM). Mitigation: ...
CVE-2010-3987
CVE-2010-3987 affects HP Insight Control Virtual Machine Management before version 6.2. The vulnerability is a remote XSS via unspecified vectors, with impact stated as I:P, no confidentiality or availability loss, and no user authentication required. HP’s security bulletin HPSBMA02598 rev.2 indi...
CVE-2010-3988
Unspecified vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to bypass intended access restrictions and cause a denial of service via unknown vectors...
CVE-2010-3991
Cross-site scripting XSS vulnerability in HP Insight Control Server Migration before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4023
CVE-2010-4023 affects HP Insight Control Power Management for Windows (before version 6.2). The vulnerability is a remote Cross-Site Scripting (XSS) issue that could allow an attacker to inject arbitrary web script or HTML via unspecified vectors. HP’s Security Bulletin HPSBMA02603 rev.1 states t...
CVE-2010-3987
Cross-site scripting XSS vulnerability in HP Insight Control Virtual Machine Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4023
Cross-site scripting XSS vulnerability in HP Insight Control Power Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2010-4024
CVE-2010-4024 affects HP Insight Control Power Management (before 6.2). The vulnerability is a Cross-Site Request Forgery (CSRF) that could allow remote attackers to hijack the authentication of victims via unknown vectors. The NVD notes a CVSS v2 base score of 6.8 (MEDIUM) with network access, n...
CVE-2010-3988
HP Insight Control Virtual Machine Management for Windows prior to v6.2 contains a Denial of Service vulnerability (CVE-2010-3988) that can be triggered remotely, as noted in HP security bulletin and CVE records. The vulnerability affects HP Insight Control VM Management before 6.2 and was addres...
HP Systems Insight Manager Arbitrary File Download Vulnerability
HP Systems Insight Manager is prone to a vulnerability that lets attackers download arbitrary files. Exploiting this issue will allow an attacker to view arbitrary files within the context of the application. Information harvested may aid in launching further attacks. The issue affects HP Systems...
HP Systems Insight Manager Arbitrary File Download Vulnerability (HPSBMA02590) - Active Check
HP Systems Insight Manager is prone to a vulnerability that lets attackers download arbitrary files. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
HP Systems Insight Manager logfile Parameter Arbitrary File Download
HP Systems Insight Manager is affected by an arbitrary file download vulnerability that can be leveraged by a remote attacker to download files of their choosing. If an attacker supplies a specially crafted HEAD request to the 'logfile' variable in 'switchFWInstallStatus.jsp', an arbitrary file c...
HP Systems Insight Manager multiple security vulnerabilities
Directory traversal, crossite scripting...
[security bulletin] HPSBMA02590 SSRT100182 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Arbitrary File Download
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02548231 Version: 1 HPSBMA02590 SSRT100182 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Arbitrary File Download NOTICE: The information in this Security Bulletin...
[security bulletin] HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery (CSRF), Cross Site Scripting (XSS), Privilege Escalation
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549477 Version: 1 HPSBMA02591 SSRT100299 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows, Remote Cross Site Request Forgery CSRF, Cross Site Scripting XSS, Privilege...
[security bulletin] HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager (SIM) for HP-UX, Linux, and Windows Running Adobe Flash, Remote Execution of Arbitrary Code, Denial of Service (DoS), Unauthorized Modification
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02549485 Version: 1 HPSBMA02592 SSRT100300 rev.1 - HP Systems Insight Manager SIM for HP-UX, Linux, and Windows Running Adobe Flash, Remote Execution of Arbitrary Code, Denial of Service DoS,...
