EUVD-2012-2938

Malware in sbrugna...

EUVD-2012-5121

Malware in sbrugna...

EUVD-2012-3264

Malware in sbrugna...

HP ArcSight WINC Connector Remote Code Execution Vulnerability

HP Arcsight is a unified security solution that enables advanced correlation analysis, log management and user activity monitoring. A remote code execution vulnerability exists in the HP ArcSight WINC Connector, which can be exploited by an attacker to execute arbitrary code in the context of an...

PT-2015-7118

Name of the Vulnerable Software and Affected Versions HP ArcSight Logger version 6.0.0.7307.1 HP ArcSight Command Center version 6.8.0.1896.0 HP ArcSight Connector Appliance version 6.4.0.6881.3 Description The issue allows local users to potentially gain privileges by leveraging access to the...

CVE-2015-6030: Undefined Security Weakness

HP ArcSight Logger 6.0.0.7307.1, ArcSight Command Center 6.8.0.1896.0, and ArcSight Connector Appliance 6.4.0.6881.3 use the root account to execute files owned by the arcsight user, which might allow local users to gain privileges by leveraging arcsight account access...

[security bulletin] HPSBMU02836 SSRT101056 rev.1 - HP ArcSight Connector Appliance and ArcSight Logger, Remote Disclosure of Information, Command Injection, Cross-Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03606700 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03606700 Version: 1 HPSBMU02836...

CVE-2012-5199

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2012-3286

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2012-5199

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2012-5198

HP ArcSight Connector Appliance older than 6.3 and ArcSight Logger older than 5.2 are affected by CVE-2012-5198, a remote information-disclosure vulnerability with unknown vectors. HP's security bulletin HPSBMU02836/SSRT notes remediation: upgrade to ArcSight Connector Appliance 6.4 and ArcSight ...

PT-2013-1765

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions prior to 6.3 HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote attackers to obtain sensitive information via unknown vectors. Recommendations For HP ArcSight Connector...

PT-2013-1766

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions 6.3 and earlier HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote authenticated users to execute arbitrary code. The exact vectors used for exploitation are not specified...

PT-2013-1592

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector Appliance versions 6.3 and earlier HP ArcSight Logger versions 5.2 and earlier Description The issue allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service. The exact...

CVE-2012-5198: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance before 6.3 and ArcSight Logger 5.2 and earlier allows remote attackers to obtain sensitive information via unknown vectors...

CVE-2012-3286: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to obtain sensitive information, modify data, or cause a denial of service via unknown vectors...

CVE-2012-5199: Undefined Security Weakness

Unspecified vulnerability in HP ArcSight Connector Appliance 6.3 and earlier and ArcSight Logger 5.2 and earlier allows remote authenticated users to execute arbitrary code via unknown vectors...

PT-2013-19: XML External Entities Resolution vulnerability in HP ArcSight Connector

The specialists of the Positive Research center have detected an XML External Entities Resolution vulnerability in HP ArcSight Connector. An attacker is able to import a specially crafted XML file, which would force ArcSight Connector to disclose local or remote resources to a malicious server on...

CVE-2012-2960

CVE-2012-2960 affects HP ArcSight Connector Appliance 6.2.0.6244.0 and ArcSight Logger 5.2.0.6288.0, with a cross-site scripting (XSS) flaw in the file import feature that allows a crafted file to execute arbitrary script in the web GUI. CERT/HP notes remote disclosure of information, and possibl...

PT-2012-4393

Name of the Vulnerable Software and Affected Versions HP ArcSight Connector appliance version 6.2.0.6244.0 HP ArcSight Logger appliance version 5.2.0.6288.0 Description A cross-site scripting XSS issue exists in the import functionality, allowing remote attackers to inject arbitrary web script or...