Lucene search
+L

910 matches found

Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.34 views

HP PCM+ GetEventsServlet SQL Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the GetEventsServlet. This servlet contains a SQL injection vulnerability in the sort and...

10CVSS3.2AI score0.03304EPSS
SaveExploits0
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.34 views

HP PCM+ AgentController Servlet Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaws exist within the Agent servlet. This servlet is vulnerable to a command injection vulnerability when...

10CVSS3.9AI score0.08507EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.37 views

HP PCM+ SNAC Registration Server UpdateDomainControllerServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateDomainControllerServlet. This servlet improperly sanitizes the 'adCert' argument...

10CVSS6.5AI score0.71293EPSS
SaveExploits6
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.38 views

HP PCM+ SNAC Registration Server UpdateCertificatesServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus. Authentication is not required to exploit this vulnerability. The specific flaw exists within the UpdateCertificatesServlet. This servlet improperly sanitizes the 'fileName' argument...

10CVSS4.1AI score0.51903EPSS
SaveExploits10References1
Zero Day Initiative
Zero Day Initiative
added 2013/09/11 12:0 a.m.72 views

HP PCM+ and Application Lifecycle Management JBoss Invoker Servlets Marshalled Object Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP PCM Plus and Application Lifecycle Management. Authentication is not required to exploit this vulnerability. The specific flaw exists within the exposed EJBInvokerServlet and JMXInvokerServlet. ...

10CVSS5AI score0.79003EPSS
SaveExploits6References2
OpenVAS
OpenVAS
added 2013/09/09 12:0 a.m.37 views

Sophos Web Protection Appliance Multiple Vulnerabilities (Jul 2013) - Active Check

Sophos Web Protection Appliance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

10CVSS6.3AI score0.90133EPSS
SaveExploits17References1
Saint
Saint
added 2013/09/09 12:0 a.m.65 views

HP System Management Homepage iprange Parameter Stack Buffer Overflow

Added: 09/09/2013 CVE: CVE-2013-2362 BID: 61337 OSVDB: 95489 Background HP System Management Homepage SMH is a web-based interface that consolidates the management of ProLiant and Integrity servers. Problem A stack buffer overflow vulnerability in HP SMH allows command execution when an attacker...

2.1CVSS9.8AI score0.00527EPSS
SaveExploits4
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.34 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 260 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 260, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.36 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 259 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 259, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits4References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.32 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 1092 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 1092, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.37 views

Hewlett-Packard Data Protector Cell Manager crs.exe Multiple Opcodes Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcodes...

10CVSS5.4AI score0.39116EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.27 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 227 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 227, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.39 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 264 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 264, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.65 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 211 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 211, the...

10CVSS5.7AI score0.89809EPSS
SaveExploits8References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.38 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 305 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 305, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.32 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 235 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 235, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.36 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 234 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 234, the...

10CVSS5.7AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.37 views

Hewlett-Packard Data Protector Cell Manager crs.exe Multiple Opcodes Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcodes 215 and...

10CVSS5.4AI score0.61043EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/06/11 12:0 a.m.39 views

Hewlett-Packard Data Protector Cell Manager crs.exe Opcode 1091 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector. Authentication is not required to exploit this vulnerability. The specific flaw exists within crs.exe which listens by default on a random TCP port. When parsing opcode 1091, the...

10CVSS5.7AI score0.47128EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/05/29 12:0 a.m.28 views

Hewlett-Packard Managed Printing Administrator mdbBuildValueBasedSQL() Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability. The specific flaw exists within the mdbBuildValueBasedSQL function inside the mdbObjectWrapper clas...

10CVSS2.7AI score0.02519EPSS
SaveExploits0References1
Rows per page
Query Builder