15691 matches found
HP ArcSight Logger security vulnerabilities
Authentication bypass, information disclosure...
HP Photosmart B210 printer SMB server buffer overflow vulnerability
Overview The HP Photosmart B210 printer utilizes an SMB server for managing the print queue. An invalid SMB packet may cause a denial of service condition, requiring the printer to be restarted. Description Fuzzing the first 296 bytes of an SMB packet may in some cases cause a denial of service...
CVE-2015-7863
CVE-2015-7863 affects Persistent Accelerite Radia Client Automation (formerly HP Client Automation) versions 7.9–9.1 prior to 2015-02-19. The root cause is the default configuration failing to protect the Remote Notify feature with Extended Notify Security, allowing a remote attacker to bypass ac...
Persistent Systems Radia Client Automation Agent Command Injection
The Persistent Systems Radia Client Automation formerly HP Client Automation agent listening on the remote port is affected by a command execution vulnerability due to a flaw in the radexecd.exe component. An unauthenticated, remote attacker can exploit this to execute arbitrary commands in the...
HP ArcSight Logger contains multiple vulnerabilities
Overview HP ArcSight Logger contains multiple vulnerabilities, allowing authentication bypass and privilege escalation in certain scenarios. Description CWE-285: Improper Authorization- CVE-2015-2136A remote authenticated user without Logger Search permissions may be able to bypass authorization...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in HP Smart Profile Server Data Analytics Layer SPS DAL 2.3 before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5444
Multiple cross-site scripting XSS vulnerabilities in HP Smart Profile Server Data Analytics Layer SPS DAL 2.3 before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5444
CVE-2015-5444 affects HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 up to 2.3.4; multiple XSS vulnerabilities allow remote attackers to inject arbitrary web script via unspecified vectors. Root cause details aren’t explicitly stated in the connected documents. Impact is remote code e...
CVE-2015-5444
Multiple cross-site scripting XSS vulnerabilities in HP Smart Profile Server Data Analytics Layer SPS DAL 2.3 before 2.3.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
HP ArcSight Logger < 6.1 Management Center XSS
The remote host has a version of HP ArcSight logger installed that is prior to 6.1. It is, therefore, affected by a reflected cross-site scripting vulnerability in the Management Center due to improper validation of user-supplied input. A remote attacker can exploit this, via a specially crafted...
October 2015 Adobe Reader, Acrobat Flash Patches
Adobe today released a jumbo-sized Patch Tuesday update for Reader, Acrobat, and Flash, addressing a combined 69 critical vulnerabilities in the software, many which can lead to information disclosure and code execution. The company warned about the bugs via a blog post at its Product Security...
CVE-2015-5443
HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...
Information disclosure
HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...
CVE-2015-5443
The CVE-2015-5443 entry concerns HP 3PAR Service Processor SPOCC, where remote authenticated users could obtain sensitive information. Affected SPOCC versions are SP 4.2.0.GA-29 (GA), SP 4.3.0.GA-17 (GA), and SP 4.3.0-GA-24 (MU1). The vulnerability is described as an information disclosure with u...
CVE-2015-5443
HP 3PAR Service Processor SP 4.2.0.GA-29 GA SPOCC, SP 4.3.0.GA-17 GA SPOCC, and SP 4.3.0-GA-24 MU1 SPOCC allows remote authenticated users to obtain sensitive information via unspecified vectors...
[security bulletin] HPSBST03502 rev.1 - HP 3PAR Service Processor (SP) SPOCC, Remote Disclosure of Information
Note: the current version of the following document is available here: https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04822249 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04822249 Version: 1 HPSBST03502 rev.1 - HP 3PAR Service Processor SP SPOCC, Remot...
HP 3PAR Service Processor SPOCC information disclosure
No description provided...
HP SiteScope DNS Tool Command Injection
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' require 'msf/core/exploit/powershell' class Metasploit3 'HP SiteScope DNS Tool Command Injection', 'Description' = %q This module exploits a command...
HP SiteScope DNS Tool Command Injection Exploit
This Metasploit module exploits a command injection vulnerability discovered in HP SiteScope 11.30 and earlier versions tested in 11.26 and 11.30. The vulnerability exists in the DNS Tool allowing an attacker to execute arbitrary commands in the context of the service. By default, HP SiteScope...
HP SiteScope DNS Tool Command Injection
This module exploits a command injection vulnerability discovered in HP SiteScope 11.30 and earlier versions tested in 11.26 and 11.30. The vulnerability exists in the DNS Tool allowing an attacker to execute arbitrary commands in the context of the service. By default, HP SiteScope installs and...