1331 matches found
CVE-2011-3162
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...
CVE-2011-3161
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1229...
CVE-2011-3157
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225...
CVE-2011-3159
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227...
CVE-2011-3158
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1226...
Code injection
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...
CVE-2011-3162
HP Data Protector Notebook Extension 6.20 and HP Data Protector for Personal Computers 7.0 are affected by an SQL injection vulnerability in the dpnepolicyservice FinishedCopy method, exposed via a DPNECentral Web Service on TCP port 80. A remote attacker can craft requests with an unsafely used ...
CVE-2011-3158
HP Data Protector Notebook Extension contains a remote SQL injection in the dpnepolicyservice component (RequestCopy) exposed on TCP port 80. Unauthenticated attackers can craft a RequestCopy with a malicious type, causing the service to construct and execute arbitrary SQL queries under the servi...
CVE-2011-3162
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1296...
CVE-2011-3159
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1227...
CVE-2011-3156
HP Data Protector Notebook Extension (and Data Protector for Personal Computers) module exposes a DPNECentral web service (dpnepolicyservice) with a LogClientInstallation method vulnerable to input validation flaws. The ZDI advisory describes remote arbitrary-code execution via the userid field i...
CVE-2011-3160
HP Data Protector Notebook Extension has a remote code execution vulnerability (ZDI-1228) affecting dpnepolicyservice via LogCopyOperation. The flaw exists in the DPNECentral Web Service on TCP port 80; the copyStatus field from a user request is used to construct a query without proper validatio...
CVE-2011-3157
HP Data Protector Notebook Extension contains a vulnerability in the dpnepolicyservice GetPolicies method that does not properly validate the clientVersion field, enabling remote attackers to execute arbitrary SQL queries as the service user. Affected products include HP Data Protector Notebook E...
CVE-2011-3158
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1226...
CVE-2011-3157
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1225...
CVE-2011-3156
Unspecified vulnerability in HP Data Protector Notebook Extension 6.20 and Data Protector for Personal Computers 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1222...
CVE-2010-2342
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
Sql injection
SQL injection vulnerability in onlinenotebookmanager.asp in DMXReady Online Notebook Manager 1.0 allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2010-2342
DMXReady Online Notebook Manager 1.0 is affected by a SQL injection in onlinenotebookmanager.asp via the ItemID parameter, enabling remote attackers to execute arbitrary SQL commands. This CVE (CVE-2010-2342) is corroborated by multiple sources in the connected documents (NVD, Red Hat advisory, C...