EUVD-2015-2231

Malware in sbrugna...

CVE-2015-2121

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...

Code injection

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...

CVE-2015-2121

HP Network Virtualization for LoadRunner and Performance Center 8.61 and 11.52 allows remote attackers to read arbitrary files via a crafted filename in a URL to the 1 HttpServlet or 2 NetworkEditorController component, aka ZDI-CAN-2569...

Network Virtualization for HP LoadRunner Information Disclosure

The remote Windows host has a version of HP LoadRunner installed that is 11.52.x and a version of HP Network Virtualization installed that is prior to 8.61 patch 3. It is, therefore, affected by an information disclosure vulnerability due to a failure in HttpServlet and NetworkEditorController to...

HP Network Virtualization storedNtxFile Directory Traversal (CVE-2014-2625)

A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "storedNtxFile" method. A remote, unauthenticated attacker can leverage this vulnerability to gain access to sensitive informati...

HP Network Virtualization toServerObject Directory Traversal (CVE-2014-2626)

A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "toServerObject" method. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to...

[security bulletin] HPSBMU03073 rev.1 - HP Network Virtualization, Remote Execution of Code, Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04374202 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04374202 Version: 1 HPSBMU03073 rev....

HP Network Virtualization, code execution

No description provided...

CVE-2014-2625

Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023...

CVE-2014-2626

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

Directory traversal

Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023...

Directory traversal

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

CVE-2014-2625

Directory traversal vulnerability in the storedNtxFile function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to read arbitrary files via crafted input, aka ZDI-CAN-2023...

CVE-2014-2626

Directory traversal vulnerability in the toServerObject function in HP Network Virtualization 8.6 aka Shunra Network Virtualization allows remote attackers to create files, and consequently execute arbitrary code, via crafted input, aka ZDI-CAN-2024...

CVE-2014-2625

Affected product/Version: HP Network Virtualization 8.6 (Shunra Network Virtualization). Vulnerability: storedNtxFile directory traversal due to insufficient input validation, enabling a remote, unauthenticated attacker to read arbitrary files on the vulnerable system. Root cause: improper saniti...

CVE-2014-2626

CVE-2014-2626 affects HP Network Virtualization / Shunra Network Virtualization 8.6. The vulnerability is in the toServerObject function, caused by insufficient input validation that enables directory traversal. An unauthenticated remote attacker can craft HTTP requests to write arbitrary files (...