1514 matches found
CVE-2011-3165: Undefined Security Weakness
Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1208...
PT-2011-4287
Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the ov.dll and the OVBuildPath function. Recommendations For HP OpenView Netwo...
PT-2011-4286
Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code. It involves the webappmon.exe parameter. No information is provided about the estimated number of potentially...
PT-2011-4285
Name of the Vulnerable Software and Affected Versions HP OpenView Network Node Manager versions 7.51 through 7.53 Description The issue allows remote attackers to execute arbitrary code. The vulnerability is related to the nnmRptConfig.exe and nameParams components. Recommendations For versions...
CVE-2011-3166: Undefined Security Weakness
Unspecified vulnerability in HP OpenView Network Node Manager OV NNM 7.51 and 7.53 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1209...
HP OpenView Network Node Manager ov.dll _OVBuildPath Buffer Overflow
This module exploits a stack buffer overflow in HP OpenView Network Node Manager 7.53 prior to NNM01213 without the SSRT100649 hotfix. By specifying a long 'textFile' argument when calling the 'webappmon.exe' CGI program, an attacker can cause a stack-based buffer overflow and execute arbitrary...
HP OpenView Storage Data Protector EXEC_CMD Buffer Overflow (CVE-2011-1866)
A remote code execution vulnerability has been reported in HP OpenView Storage Data Protector. The vulnerability is due to insufficient boundary checking while handling EXECCMD messages. A remote attacker may exploit this vulnerability by sending a specially crafted EXECCMD to an affected service...
Cross site scripting
Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2410
Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2410
Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2410
CVE-2011-2410 is an XSS vulnerability in HP OpenView Performance Insight (versions 5.3, 5.31, 5.4, 5.41, 5.41.001, 5.41.002). The available documents consistently describe a cross-site scripting flaw that lets an attacker inject arbitrary web script or HTML via unspecified vectors. Connected sour...
PT-2011-3838
Name of the Vulnerable Software and Affected Versions HP OpenView Performance Insight versions 5.3 through 5.41.002 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For HP OpenView Performance Insight versions 5.3 through...
CVE-2011-2410: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
HP OpenView Performance Insight Security Bypass and HTML Injection Vulnerabilities
HP OpenView Performance Insight is prone to a security-bypass vulnerability and an HTML-injection vulnerability. An attacker may leverage the HTML-injection issue to inject hostile HTML and script code that would run in the context of the affected site, potentially allowing the attacker to steal...
HP OpenView Performance Insight Security Bypass and HTML Injection Vulnerabilities
HP OpenView Performance Insight is prone to a security-bypass vulnerability and an HTML-injection vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
HP OpenView Performance Insight sendEmail.jsp XSS
The version of HP OpenView Performance Insight running on the remote host has a reflected cross-site scripting vulnerability. Input to the 'bgcolor' parameter of sendEmail.jsp is not properly sanitized. A remote attacker could exploit this by tricking a user into requesting a maliciously crafted...
CVE-2011-2406
Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2011-2407
Unspecified vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote attackers to obtain access via unknown vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP OpenView Performance Insight 5.3, 5.31, 5.4, 5.41, 5.41.001, and 5.41.002 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...