CVE-2013-2349

Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1896...

CVE-2013-2347

The Backup Client Service OmniInet.exe in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary commands or cause a denial of service via a crafted EXECBAR packet to TCP port 5555, aka ZDI-CAN-1885...

CVE-2013-6195

CVE-2013-6195 is documented as an unspecified remote vulnerability in HP Storage Data Protector 6.2X that could allow remote code execution or DoS. Connected sources identify HP Data Protector patches and advisories (HPSBMU02895) addressing multiple CVEs, including 2013-6195, with platform-specif...

CVE-2013-2348

Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-1892...

CVE-2013-6195

Unspecified vulnerability in HP Storage Data Protector 6.2X allows remote attackers to execute arbitrary code or cause a denial of service via unknown vectors, aka ZDI-CAN-2008...

HP Application Information Optimizer Archive Query Server组件任意代码执行漏洞

BUGTRAQ ID: 64557 CVECAN ID: CVE-2013-6189 HP Application Information Optimizer 数据库软件可用智能数据管理和存储将结构化数据占用空间降至最低，并实现应用信息价值最大化。 HP Application Information Optimizer 6.2, 6.3, 6.4, 7.0版本在Archive Query Server组件的实现中存在安全漏洞，可使攻击者在受影响应用上下文中执行任意代码。 0 HP Application Information Optimizer 7.0 HP Application...

HP Service Manager WebTier and Windows Client未明跨站脚本漏洞

CVE ID:CVE-2013-6198 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager WebTier and Windows Client存在未明跨站脚本漏洞，允许远程攻击者利用漏洞注入恶意脚本或HTML代码，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 HP Service Manager WebTier and Windows Client 9.20 HP Service Manager WebTier and Windows Client 9.21 厂商补丁： HP ---...

HP Service Manager WebTier and Windows Client未明代码执行漏洞

CVE ID:CVE-2013-6197 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager WebTier and Windows Client存在未明安全漏洞，允许通过验证的远程用户执行任意代码。 0 HP Service Manager WebTier and Windows Client 9.20 HP Service Manager WebTier and Windows Client 9.21 厂商补丁： HP ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

HP Data Protector Backup Client Service Remote Code Execution

This module abuses the Backup Client Service OmniInet.exe to achieve remote code execution. The vulnerability exists in the EXECBAR operation, which allows to execute arbitrary processes. This module has been tested successfully on HP Data Protector 6.20 on Windows 2003 SP2 and Windows 2008 R2...

HP Data Protector Backup Client Service Directory Traversal

This module exploits a directory traversal vulnerability in the Hewlett-Packard Data Protector product. The vulnerability exists in the Backup Client Service OmniInet.exe and is triggered when parsing packets with opcode 42. This module has been tested successfully on HP Data Protector 6.20 on...

HP Client Automation Command Injection

This module exploits a command injection vulnerability on HP Client Automation, distributed actually as Persistent Systems Client Automation. The vulnerability exists in the Notify Daemon radexecd.exe, which doesn't authenticate execution requests by default. This module has been tested...

Debian DSA-2829-1 : hplip - several vulnerabilities

Multiple vulnerabilities have been found in the HP Linux Printing and Imaging System: Insecure temporary files, insufficient permission checks in PackageKit and the insecure hp-upgrade service has been disabled. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package...

CVE-2013-6197

Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...

CVE-2013-6198

Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6189

Unspecified vulnerability in the Archive Query Server in HP Application Information Optimizer formerly HP Database Archiving 6.2, 6.3, 6.4, and 7.0 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1666...

Code injection

Unspecified vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote authenticated users to execute arbitrary code via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in HP Service Manager WebTier and Windows Client 9.20 and 9.21 before 9.21.661 p8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2013-6198

HP Service Manager WebTier and Windows Client 9.20 and 9.21 are affected by CVE-2013-6198, a cross-site scripting (XSS) vulnerability with unspecified vectors that could allow remote injection of malicious script or HTML in the context of a logged-in user. Impact is partial integrity compromise t...

CVE-2013-6197

HP Service Manager WebTier and Windows Client versions 9.20 and 9.21 are affected by CVE-2013-6197 (before 9.21.661 p8), enabling remote authenticated users to execute arbitrary code via unknown vectors. The HP advisory HPSBMU02959 rev.1 and related HP security bulletin summarize the vulnerabilit...

CVE-2013-6189

HP Application Information Optimizer Archive Query Server (AIO) vulnerability CVE-2013-6189 affects AIO versions 6.2–7.0 and is a remote code execution issue in the Archive Query Server component. Root cause: stack-based/opcode handling vulnerabilities (insufficient sanitization or incorrect opco...