CVE-2015-5408

HP CentralView vulnerability CVE-2015-5408 affects multiple CentralView components (Fraud Risk Management 11.1–11.3; Revenue Leakage Control 4.1–4.3; Dealer Performance Audit 2.0–2.1; Credit Risk Control 2.1–2.3; Roaming Fraud Control 2.1–2.3; Subscription Fraud Prevention 2.0–2.1). It enables re...

CVE-2015-5406

HP CentralView products (Fraud Risk Management 11.1–11.3; Revenue Leakage Control 4.1–4.3; Dealer Performance Audit 2.0–2.1; Credit Risk Control 2.1–2.3; Roaming Fraud Control 2.1–2.3; Subscription Fraud Prevention 2.0–2.1) are affected by CVE-2015-5406/5407/5408, per HP’s security bulletin HPSBG...

CVE-2015-5406

HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control 2.1, 2.2, and 2.3; CentralView Roaming Fraud Control 2.1, 2.2, and 2.3; and CentralView Subscription...

CVE-2015-5407

HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Performance Audit 2.0 and 2.1; CentralView Credit Risk Control 2.1, 2.2, and 2.3; CentralView Roaming Fraud Control 2.1, 2.2, and 2.3; and CentralView Subscription...

CVE-2015-2132

CVE-2015-2132 describes a local privilege-elevation vulnerability in HP-UX execve(2) across HP-UX B.11.11, B.11.23 and B.11.31. Root cause: vulnerable execve system-call implementation. Exploitation is local; HP released patches PHKL_44305 (11.11), PHKL_44285 (11.23) and PHKL_44278 (11.31) per HP...

CVE-2015-2132

Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2015-2137

Unspecified vulnerability in HP Operations Manager i OMi 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2015-5407

CVE-2015-5407 affects HP CentralView Fraud Risk Management 11.1, 11.2, 11.3; CentralView Revenue Leakage Control 4.1–4.3; CentralView Dealer Performance Audit 2.0–2.1; CentralView Credit Risk Control 2.1–2.3; CentralView Roaming Fraud Control 2.1–2.3; CentralView Subscription Fraud Prevention 2.0...

CVE-2015-2137

HP Operations Manager i (OMi) versions 9.22–10.01 are affected by an unspecified remote code execution vulnerability (CVE-2015-2137). The issue allows remote code execution via unknown vectors and is rated high/severe (CVSSv2 base 9.3, impact C/I/A). HP’s Security Bulletin HPSBGN03393 rev.1 notes...

Aruba Mobility Controller 6.4.2.8 - Multiple Vulnerabilities

Title: Aruba Mobility Controller CSRF And XSS Vulnerabilities Date: 08/016/2015 Author: Itzik Chen Product web page: http://www.arubanetworks.com Affected Version: 6.4.2.8 Tested on: Aruba7240, Ver 6.2.4.8 Summary ================ Aruba Networks is an HP company, one of the leaders in enterprise...

Aruba Mobility Controller 6.4.2.8 - CSRF And XSS Vulnerabilities

Exploit for hardware platform in category web applications Title: Aruba Mobility Controller CSRF And XSS Vulnerabilities Date: 08/016/2015 Author: Itzik Chen itzik1 at gmail.com Product web page: http://www.arubanetworks.com Affected Version: 6.4.2.8 Tested on: Aruba7240, Ver 6.2.4.8 Summary...

Aruba Mobility Controller 6.4.2.8 - Multiple Vulnerabilities

Aruba Mobility Controller 6.4.2.8 - Multiple Vulnerabilities Title: Aruba Mobility Controller CSRF And XSS Vulnerabilities Date: 08/016/2015 Author: Itzik Chen Product web page: http://www.arubanetworks.com Affected Version: 6.4.2.8 Tested on: Aruba7240, Ver 6.2.4.8 Summary ================ Aruba...

HPSBHF03408 rev.3 - HP PCs with HP lt4112 LTE/HSPA+ Gobi 4G Module, Remote Execution of Arbitrary Code

Potential Security Impact Remote execution of arbitrary code VULNERABILITY SUMMARY Potential security vulnerabilities have been identified in certain HP notebook PCs with the HP lt4112 LTE/HSPA+ Gobi 4G Module. The vulnerabilities could be exploited remotely to allow execution of arbitrary code...

HP System Management Homepage < 7.2.5 / 7.4.1 Multiple Vulnerabilities (POODLE)

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.2.5 or 7.4.1. It is, therefore, affected by the following vulnerabilities : - An information disclosure vulnerability exists exists in OpenSSL due to the pretty...

HP/HPE System Management Homepage (SMH) Multiple Vulnerabilities (HPSBMU03380)

HP/HPE System Management Homepage SMH is prone to multiple vulnerabilities. Copyright C 2015 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is...

[CVE-2015-3253] Apache Groovy Zero-Day Vulnerability Disclosure

Severity: Important Vendor: The Apache Software Foundation Versions Affected: All unsupported versions ranging from 1.7.0 to 2.4.3. Impact Remote execution of untrusted code, DoS Description When an application has Groovy on classpath and that it uses standard Java serialization mechanims to...

HP System Management Homepage 7.3.x / 7.4.x < 7.5.0 Multiple Vulnerabilities (FREAK)

According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.5.0. It is, therefore, affected by multiple vulnerabilities : - A flaw exists within the 'moddeflate' module when handling highly compressed bodies. A remote attack...

CVE-2015-2134

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

CVE-2015-2134

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...