CVE-2013-6216

Unspecified vulnerability in HP Array Configuration Utility, Array Diagnostics Utility, ProLiant Array Diagnostics, and SmartSSD Wear Gauge Utility 9.40 and earlier allows local users to gain privileges via unknown vectors...

HP LeftHand OS Management Protocol Detection

Binary data hpsaniqhydradetect.nbin...

HP StoreVirtual Storage Remote Unauthorized Access

The remote HP storage system running LeftHand OS has an SSH support backdoor mechanism built in that may allow a remote attacker to gain root shell access to the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid73461; scriptversion"2.4"; scriptcvsdate"Date:...

HP LeftHand OS Unmanaged Host Detection

The remote HP storage system running HP LeftHand OS formerly known as SAN/iQ is in an unmanaged state, meaning that it can be accessed and controlled by any remote user and is not protected by any credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...

HP StoreVirtual 4000 and StoreVirtual VSA Software dbd_manager RCE

The remote HP storage system running LeftHand OS is affected by an unspecified remote arbitrary code execution vulnerability in the dbdmanager component. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid73463;...

HP Unified Functional Testing ExGrid SaveXML Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Unified Functional Testing. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within th...

HP Integrated Lights-Out unauthorized access

Information leakage of password...

CVE-2014-2600

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors...

CVE-2014-2600

CVE-2014-2600 affects HP IceWall Identity Manager 4.0–SP1, 5.0 and HP IceWall SSO 10.0 Password Reset Option when Apache Commons FileUpload is used. The vulnerability allows remote authenticated users to cause a Denial of Service via unknown vectors. HP/SSRT bulletin HPSBGN02986 rev.1 documents t...

CVE-2014-2600

Unspecified vulnerability in HP IceWall Identity Manager 4.0 through SP1 and 5.0 and IceWall SSO 10.0 Password Reset Option, when Apache Commons FileUpload is used, allows remote authenticated users to cause a denial of service via unknown vectors...

Hewlett-Packard LeftHand Virtual SAN Appliance dbd_manager libens Unmarshalling Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP LeftHand Virtual SAN Appliance. Authentication is not required to exploit this vulnerability. The flaw exists within the dbdmanager component which receives messages via the hydra process. This...

Jenkins HP Application Automation Tools Plugin Password Encryption Security Weakness

The remote host is using the Jenkins HP Application Automation tools plugin. Nessus was able to remotely access one or more unprotected files in the Jenkins build system and decrypt the HP Application Lifecycle Management password. These passwords are currently encrypted with a known, hard-coded...

HP Network Node Manager Cross-Site Scripting - Ver2 (CVE-2011-4156)

A cross-site scripting vulnerability has been reported in Hp Network Node Manager I. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

HP StoreOnce Appliances远程未授权访问漏洞

Bugtraq ID:66463 CVE ID:CVE-2013-6211 HP StoreOnce是一个有联合重复数据删除功能的备份及恢复解决方案。 HP StoreOnce存在一个未明安全漏洞，允许远程攻击者利用漏洞未授权访问设备应用。 0 HP StoreOnce Virtual Storage Appliance VSA v3.7.1 HP StoreOnce 2610 iSCSI Backup System v3.6.5 HP StoreOnce 2620 iSCSI Backup System v3.6.5 HP StoreOnce 4210 iSCSI Backup...

HP Managed printing Administration jobAcct Remote Command Execution - Ver2 (CVE-2011-4166)

A command execution vulnerability has been reported in Hp Managed Printing Administration. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

HP SiteScope issueSiebelCmd SOAP Request Code Execution - Ver2 (CVE-2013-4835)

A command execution vulnerability has been found in HP SiteScope. The vulnerability is due to lack of authentication when handling "issueSiebelCmd" SOAP requests. A remote unauthenticated attacker can exploit this vulnerability by sending crafted requests to the affected service...

CVE-2013-6211

Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance VSA before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or...

Code injection

Unspecified vulnerability in HP StoreOnce Virtual Storage Appliance VSA before 3.7.2, StoreOnce 26xx and 4210 iSCSI Backup System before 3.9.0, StoreOnce 4210 FC Backup System before 3.9.0, and StoreOnce 4xxx Backup System before 3.9.0 allows remote attackers to obtain sensitive information or...

CVE-2013-6211

HP StoreOnce family (VSA up to 3.7.2; 2610/2620/4210 iSCSI backups up to 3.9.0; 4210 FC/4220/4420/4430 backups up to 3.9.0) contains CVE-2013-6211, a remote vulnerability allowing an attacker to obtain sensitive information or cause a denial of service. HP’s Security Bulletin HPSBST02968 rev.1 li...