15694 matches found
HP Data Protector Opcode 42 Directory Traversal - Ver2 (CVE-2013-6194)
A directory traversal vulnerability has been reported in HP Data Protector. The vulnerability is due to a lack of input sanitization on a file name provided with Opcode 42. A remote unauthenticated attacker could exploit this vulnerability by sending a crafted request to the vulnerable service...
Chrome, Firefox, Safari and IE – All Browsers Hacked at Pwn2Own Competition
The Annual Pwn2Own Hacking Competition 2015 held in Vancouver is over and participants from all over the world nabbed $557,500 in bug bounties for 21 critical bugs in top four web browsers as well as Windows OS, Adobe Reader and Adobe Flash. During the second and final day of this year’s hacking...
HP ArcSight Logger < 6.0P1 Multiple Vulnerabilities
According to its self-reported version number, the version of HP ArcSight Logger installed on the remote host is prior to 6.0P1. It is, therefore, affected by the following vulnerabilities : - An XXE injection vulnerability exists due to the improper verification of sources. An authenticated,...
Flash, Reader, Firefox and IE All Fall On First Day of Pwn2Own
Four different research teams on Wednesday cracked four products–Adobe Flash, Reader, Mozilla Firefox, and Microsoft Internet Explorer—and collectively earned a payout of $317,000 on the first day of Pwn2Own 2015. The annual hacking contest, which kicked off Wednesday in Vancouver, runs...
HP Universal Configuration Management Database Server Detection
Binary data hpucmdbserverdetect.nbin...
HP Universal Configuration Management Database Data Flow Probe Gateway Detection
Binary data hpucmdbprobegatewaydetect.nbin...
HP Universal Configuration Management Database Data Flow Probe Gateway Cross-Site Tracing
The version of HP Universal Configuration Management Database Data Flow Probe Gateway running on the remote web server is affected by a cross-site tracing vulnerability. A remote attacker can exploit this to gain access to information in HTTP headers such as cookies and authentication data...
HP Universal Configuration Management Database Server Authentication Bypass
The version of HP Universal Configuration Management Database Server running on the remote web server is affected by an authentication bypass vulnerability due to the JMX-Console component performing access control only for GET and POST methods. A remote attacker, using the HTTP HEAD method, can...
Multiple Unspecified Vulnerabilities in HP ArcSight Logger
HP ArcSight Logger is a log management software tool that enables you to collect and consolidate data from any log-generating source for log management, searching, indexing, reporting, analysis, and retention. HP ArcSight Logger has an unspecified security vulnerability that could be exploited by...
HP ArcSight contains multiple vulnerabilities
Overview HP ArcSight Logger and ESM contains multiple vulnerabilities. Description CWE-434: Unrestricted Upload of File with Dangerous Type - CVE PendingHP ArcSight Logger 5.3.1.6838.0 configuration import file upload capability does not sanitize file names, which allows a remote, authenticated...
HP Point of Sale multiple security vulnerabilities
Multiple vulnereabilities in drivers...
HP OPOS CCO Drivers RCE Vulnerabilities
The HP OLE Point of Sale OPOS Common Control Objects CCO drivers installed on the remote host are prior to version 1.13.003. They are, therefore, potentially affected by unspecified vulnerabilities in the following ActiveX controls : - OPOSCashDrawer.ocx - OPOSCheckScanner.ocx - OPOSLineDisplay.o...
HP ArcSight Enterprise Security Manager and Logger security vulnerabilities
No description provided...
[security bulletin] HPSBGN03249 rev.1 - HP ArcSight Enterprise Security Manager and Logger, Multiple Remote Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04562193 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04562193 Version: 1 HPSBGN03249 rev....
CVE-2015-2107
HP Operations Manager i Management Pack 1.x before 1.01 for SAP allows local users to execute OS commands by leveraging SAP administrative privileges...
CVE-2014-7885
Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager ESM before 6.8c have unknown impact and remote attack vectors...
CVE-2014-7884
Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors...
Design/Logic Flaw
Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors...