15694 matches found
HP Network Virtualization toServerObject Directory Traversal (CVE-2014-2626)
A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "toServerObject" method. A remote, unauthenticated attacker could exploit this vulnerability by sending crafted HTTP requests to...
HP Network Virtualization storedNtxFile Directory Traversal (CVE-2014-2625)
A directory traversal vulnerability exists in HP Network Virtualization software. The vulnerability is due to insufficient input validation of user parameters passed to "storedNtxFile" method. A remote, unauthenticated attacker can leverage this vulnerability to gain access to sensitive informati...
HP Universal CMDB Default Credentials Arbitrary File Upload (CVE-2014-2617)
A code execution vulnerability exists in HP Universal CMDB. The vulnerability is due to the use of hard-coded credentials when processing HTTP requests. A remote attacker can upload arbitrary files to arbitrary locations using the default credentials...
HPSBPI03107 rev.3 - Certain HP LaserJet Printers, MFPs and Certain HP OfficeJet Enterprise Printers using OpenSSL, Remote Unauthorized Access
Potential Security Impact Remote Unauthorized access VULNERABILITY SUMMARY A potential security vulnerability has been identified with certain HP LaserJet Printers, MFPs and certain HP OfficeJet Enterprise Printers using OpenSSL. The vulnerability could be exploited remotely to allow remote...
HP Network Node Manager i Remote Code Execution (HPSBMU03075)
The version of HP Network Node Manager i NNMi installed on the remote host is a version that is potentially affected by a remote code execution vulnerability. Note that Nessus did not check for the presence of a patch or workaround for this issue. C Tenable Network Security, Inc...
HP Network Node Manager I code execution
No description provided...
[security bulletin] HPSBMU03075 rev.1 - HP Network Node Manager I (NNMi) for Windows and Linux, Remote Execution of Arbitrary Code
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04378450 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04378450 Version: 1 HPSBMU03075 rev....
CVE-2014-2624
Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264...
Design/Logic Flaw
Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264...
CVE-2014-2624
HP NNMi on Windows/Linux (versions 9.0x/9.1x/9.2x) is affected by CVE-2014-2624, a remote-code-execution vulnerability due to memory corruption in ovopi.dll and the PMD service. The root cause involves unsafe handling of user-controlled data (strcpy/strcat) when processing stack_option UDP packet...
CVE-2014-2624
Unspecified vulnerability in HP Network Node Manager i NNMi 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-2264...
HP Network Node Manager I PMD Buffer Overflow
This module exploits a stack buffer overflow in HP Network Node Manager I NNMi. The vulnerability exists in the pmd service, due to the insecure usage of functions like strcpy and strcat while handling stackoption packets with user controlled data. In order to bypass ASLR this module uses a...
HP System Management Homepage Login Utility
This module attempts to login to HP System Management Homepage using host operating system authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/loginscanner/smh' require...
HP-UX LPD 命令执行漏洞
No description provided by source...
HP System Management Homepage 7.1.2 Local 权限提升漏洞
No description provided by source...
CVE-2013-6335
The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...
Design/Logic Flaw
The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...
HP Service Manager multiple security vulnerabilities
Crossite scripting, unauthorized access, privilege escalation...
XXE Injection in HP Release Control
Hello! I'll give you additional information concerning advisory HP Release Control Authenticated XXE Exploit http://1337day.com/exploit/description/22267. Three different vulnerabilities were used in this exploit for successful attack. For my attack it's needed to use only one vulnerability exact...