HP-UX PHSS_44149 : s700_800 11.23 X/Motif Runtime Patch

s700800 11.23 X/Motif Runtime Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable Network...

HP-UX PHSS_44188 : s700_800 11.11 X/Motif Runtime Periodic Patch

s700800 11.11 X/Motif Runtime Periodic Patch : Potential security vulnerabilities has been identified with HP-UX running the X Windows Service libraries. These vulnerabilities could be exploited remotely to create a Denial of Service DoS or execute arbitrary code. %NASLMINLEVEL 70300 C Tenable...

HP-UX PHKL_44285 : s700_800 11.23 exec(2) cumulative patch

s700800 11.23 exec2 cumulative patch : A potential security vulnerability have been identified with HP-UX programs using the execve2 system call. The vulnerability could be exploited locally to create an elevation of privilege. References: CVE-2015-2132 SSRT102037. %NASLMINLEVEL 70300 C Tenable...

HP Universal Configuration Management Database Server (UCMDB) Local Information Disclosure (HPSBGN03504)

The version of HP Universal Configuration Management Database Server UCMDB running on the remote web server is affected by an unspecified local information disclosure vulnerability. A local attacker can exploit this to gain access to admin or root password information. C Tenable Network Security,...

www8.hp.com XSS vulnerability

Vulnerable URL: http://www8.hp.com/in/en/hp-search/search-results.html?ajaxpage=1/page=1&/cc=in&/lang=en&/qt=%27%22%3E%27%22--%3E%3C/style%3E%3C/scRipt%20%3E%3CscRipt%3Ealert%28%27XSSPOSED%27%29%3C/scRipt%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2015 Latest check for patch:|...

www8.hp.com XSS vulnerability

Vulnerable URL: http://www8.hp.com/ca/en/hp-search/search.html?nores=true=%2F%22%3E%3Cimg%20src%3Dx%3Aalert%28%2FXSSPOSED%2F%29%20onerror%3Deval%28src%29%3E Details: Description| Value ---|--- Patched:| Yes, at 11.10.2015 Latest check for patch:| 11.10.2015 02:20 GMT Vulnerability type:| XSS...

HP Data Protector 8.x - Remote Command Execution

No description provided by source. !/usr/bin/python Exploit Title: HP-Data-Protector-8.x Remote command execution. Google Dork: - Date: 30/01/2015 Exploit Author: Juttikhun Khamchaiyaphum Vendor Homepage: https://h20564.www2.hp.com/hpsc/doc/public/display?docId=emrna-c04373818 Software Link:...

HP ArcSight Logger < 6.0 P2 Multiple Vulnerabilities

According to its self-reported version number, the version of HP ArcSight Logger installed on the remote host is prior to 6.0 P2. It is, therefore, affected by multiple vulnerabilities : - An authorization bypass vulnerability exists that allows an authenticated, remote attacker to bypass...

CVE-2015-5440

HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors...

Authorization

HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors...

CVE-2015-2136

HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors...

CVE-2015-5440

HP UCMDB 10.00 and 10.01 before 10.01CUP12, 10.10 and 10.11 before 10.11CUP6, and 10.2x before 10.21 allows local users to obtain sensitive information via unspecified vectors...

CVE-2015-2136

HP ArcSight Logger before 6.0 P2 allows remote authenticated users to bypass the intended authorization policy via unspecified vectors...

CVE-2015-2136

HP ArcSight Logger prior to version 6.0 P2 contains CVE-2015-2136: remote authenticated users can bypass the intended authorization policy (noted via the SOAP interface) and perform unauthorized actions. Affected product/version: HP ArcSight Logger before 6.0 P2. Root cause indicated as improper ...

CVE-2015-5440

HP UCMDB local information disclosure (CVE-2015-5440) affects HP UCMDB server versions 10.00, 10.01 (pre-10.01CUP12), 10.10, 10.11 (pre-10.11CUP6), and 10.2x (pre-10.21). A local attacker can obtain sensitive information via unspecified vectors; HP lists exact patch versions: 10.01CUP12 for v10.0...

CVE-2015-5426

Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...

Design/Logic Flaw

Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...

CVE-2015-5426

HP LoadRunner Controller (pre-12.50) is affected by a stack-based buffer overflow while parsing .lrs scenario files, allowing local code execution in the context of the current user. HP’s security bulletin HPSBMU03339 rev.1 states only impacted versions are affected and recommends upgrading to HP...

CVE-2015-5426

Unspecified vulnerability in HP LoadRunner Controller before 12.50 allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2756...

The vulnerability of the HP Intelligent Provisioning server automatic deployment tool allows a attacker to execute arbitrary code.

The vulnerability of the HP Intelligent Provisioning server automatic deployment tool is related to errors in the code. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...