15687 matches found
CVE-2015-0949
The System Management Mode SMM implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revision L71 Ver. 01.09, and possibly other BIOS implementations does not ensure that function calls operate on SMRAM memory locations, which allows local users to bypass the Secure Bo...
CVE-2015-0949
CVE-2015-0949 pertains to SMM (System Management Mode) call-outs that may run outside SMRAM in certain BIOS implementations (Dell Latitude E6430 A09, HP EliteBook 850 G1 L71 Ver. 01.09, and potentially others). Root cause: SMM code does not ensure function calls operate on SMRAM memory locations,...
Dell, HP Memory-Access Bugs Open Attacker Path to Kernel Privileges
Vulnerabilities in Dell and HP laptops could allow an attacker to access information and gain kernel privileges via the devices’ Direct Memory Access DMA capability. DMA is a processing-efficiency approach for peripherals such as PCI cards or network interface cards that, as the name suggests,...
HPSBHF03647 rev. 2 - HP Open-Chassis Pre-boot Direct Memory Access (DMA) Vulnerability
Potential Security Impact Arbitrary Code Execution, Denial of Service, Information Disclosure. Source: HP, HP Product Security Response Team PSRT. Reported by: Mickey Shkatov from Eclypsium, and Zoltan Harmath from Microsoft. VULNERABILITY SUMMARY A potential security vulnerability with pre-boot...
HPSBPI03648 rev. 1 - HP Enterprise Printers - Potential Redirection Page Cross-Site Scripting After Clicking Third-Party Malicious Link
Potential Security Impact Cross-Site Scripting VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP printers and MFPs that would allow redirection page Cross-Site Scripting in a client’s browser by clicking on a third-party malicious link. RESOLUTION HP has...
HPSBHF03649 rev. 3 - Intel Rapid Storage Technology (RST) December 2019 Security Updates
Potential Security Impact Escalation of privilege. Source: HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY A potential security vulnerability has been identified in the Intel Rapid Storage Technology RST which may allow escalation of privilege. RESOLUTION Intel...
Security Bulletin: IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552
Summary IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552 Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. This...
Security Bulletin: IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities (CVE-2019-1547,CVE-2019-1549, CVE-2019-1563)
Summary IBM MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities CVE-2019-1547, CVE-2019-1549 and CVE-2019-1563 Vulnerability Details CVEID: CVE-2019-1547 DESCRIPTION: Normally in OpenSSL EC groups always have a co-factor present and this is used in side channel resistant code...
HPSBPI03646 rev.1 - Certain HP Enterprise MFP products: Elevation of Privilege
Potential Security Impact Elevation of privilege VULNERABILITY SUMMARY A potential security vulnerability has been identified for certain HP multifunction printers MFP which may lead to elevation of privilege. RESOLUTION HP has provided firmware updates for potentially impacted printers for the...
The vulnerability of the device performance information collection application HP Touchpoint Analytics, due to insufficient validation of input data, allows a perpetrator to execute arbitrary code.
The vulnerability of the HP Touchpoint Analytics performance monitoring application relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using malicious DLL files...
HPSBGN03632 rev. 1 - HP SoftPaq Installer Vulnerability
Potential Security Impact Execution of Arbitrary Code, Escalation of Privilege. Source: HP, HP Product Security Response Team PSRT Reported by: Pierre-Alexandre Braeken; Eran Shimony VULNERABILITY SUMMARY A potential security vulnerability has been identified with a version of the HP Softpaq...
HP Access Control Elevation of Privilege Vulnerability
HP Access Control is a print machine access control program. A security vulnerability exists in versions of HP Access Control prior to 16.7. An attacker could exploit the vulnerability to elevate privileges...
HP Samsung Mobile Print Information Disclosure Vulnerability
HP Samsung Mobile Print is a laser printer device. A security vulnerability exists in the HP Samsung Mobile Print configuration information, which can be exploited by a remote attacker to submit a special request that could obtain sensitive information...
Security Bulletin: WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552
Summary WebSphere MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2019-1552 Vulnerability Details CVEID: CVE-2019-1552 DESCRIPTION: OpenSSL has internal defaults for a directory tree where it can find a configuration file as well as certificates used for verification in TLS. Thi...
Security Bulletin: WebSphere MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities (CVE-2019-1547,CVE-2019-1549, CVE-2019-1563)
Summary WebSphere MQ for HP NonStop Server is affected by multiple OpenSSL vulnerabilities CVE-2019-1547, CVE-2019-1549 and CVE-2019-1563 Vulnerability Details CVEID: CVE-2019-1563 DESCRIPTION: In situations where an attacker receives automated notification of the success or failure of a decrypti...
HP Printers XSS Vulnerability (HPSBPI03624)
Multiple HP printers are vulnerable to a cross-site scripting vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...
HP DeskJet 3630 Printers CSRF Vulnerability (HPSBPI03613)
Certain HP DeskJet 3630 All-in-One Printers have a cross-site request forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C...
Design/Logic Flaw
389 Directory Server before 1.2.7.1 aka Red Hat Directory Server 8.2 and HP-UX Directory Server before B.08.10.03, when audit logging is enabled, logs the Directory Manager password nsslapd-rootpw in cleartext when changing cn=config:nsslapd-rootpw, which might allow local users to obtain sensiti...
CVE-2019-6319
HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...
CVE-2019-6319
HP DeskJet 3630 All-in-One Printers models F5S43A - F5S57A, K4T93A - K4T99C, K4U00B - K4U03B, and V3F21A - V3F22A firmware version SWP1FN1912BR or higher have a Cross-Site Request Forgery CSRF vulnerability that could lead to a denial of service DOS or device misconfiguration...