HP Virtual Table Server (VTS) Database Import RCE

The HP Virtual Table Server running on the remote host is affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this, via a malicious connection string or SQL command, to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if...

HP UCMDB Browser information disclosure Vulnerability(CVE-2 0 1 5-6 8 6 2)-vulnerability warning-the black bar safety net

Affected system: HP HP UCMDB Browser the 4.02 Description: CVECAN ID: CVE-2 0 1 5-6 8 6 2 HP UCMDB Browser is to access UCMDB data of the lightweight Web client. HP UCMDB Browser 4.02 prior version there is a security vulnerability. A remote attacker could exploit this vulnerability can obtain...

CVE-2015-6858

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

CVE-2015-5447

Cross-site scripting XSS vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5446

HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-5445

Cross-site request forgery CSRF vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Code injection

HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5434

CVE-2015-5434 affects HPE Networking/Comware 5 and 7 (HP/H3C) devices. Multiple connected sources describe a vulnerability where remote, unauthenticated attackers can bypass access restrictions or cause a denial of service by abusing virtual routing and forwarding (VRF) hopping. The root issue is...

CVE-2015-5445

CVE-2015-5445 affects HP StoreOnce Backup System software prior to 3.13.1. The vulnerability is a Cross-site Request Forgery (CSRF) that allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Public references describe the affected product and C...

CVE-2015-5447

HP StoreOnce Backup System Software vulnerability CVE-2015-5447: a cross-site scripting (XSS) flaw exists in product versions before 3.13.1. The issue allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Connected sources reiterate XSS and, in CNVD, no...

CVE-2015-5446

HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2015-5445

Cross-site request forgery CSRF vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-5447

Cross-site scripting XSS vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2015-5434

HPE Networking Products, originally branded as Comware 5, Comware 7, H3C, or HP, allow remote attackers to bypass intended access restrictions or cause a denial of service via "Virtual routing and forwarding VRF hopping."...

CVE-2015-6858

HP Insight Control Server Provisioning (HP) is affected by CVE-2015-6858 due to a vulnerability in the RabbitMQ component used by the server provisioning feature prior to version 7.5.0. The issue enables remote attackers to obtain sensitive information via unspecified vectors. The provided docume...

CVE-2015-5446

CVE-2015-5446 affects HP StoreOnce Backup System software prior to 3.13.1, where remote attackers could execute arbitrary code via unspecified vectors. CVSSv3.0 base score 7.5 (HIGH) with adjacent network access, no user interaction, and high impact to confidentiality, integrity, and availability.

Design/Logic Flaw

HP Helion Eucalyptus 4.1.x before 4.1.2 and HPE Helion Eucalyptus 4.2.x before 4.2.1 allow remote authenticated users to bypass intended access restrictions and modify arbitrary 1 access key credentials by leveraging knowledge of a key ID or 2 signing certificates by leveraging knowledge of a...