Code injection

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors...

Information disclosure

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via...

CVE-2013-4829

CVE-2013-4829 affects several HP FutureSmart printers and MFPs: HP Color LaserJet M775dn, M775f, M775z, M775z+, HP LaserJet M725 (dn/f/z), M525c/f/dn, M575c, CM4540, and ScanJet Enterprise 8500fn1. The vulnerability allows local users to read images of arbitrary scanned documents via unspecified ...

CVE-2013-4828

The CVE-2013-4828 issue affects HP FutureSmart printers and MFPs (e.g., HP Color LaserJet M775/MFP, M575c, M4555, ScanJet 8500fn1, etc.). Root cause: PDFs could be weakly encrypted, enabling potential leakage of scanned information. Impact: information disclosure via unspecified vectors; exploit ...

CVE-2013-4828

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices do not properly encrypt PDF documents, which allows remote attackers to obtain sensitive information via...

CVE-2013-4829

HP LaserJet M4555, M525, and M725; LaserJet flow MFP M525c; LaserJet Enterprise color flow MFP M575c; Color LaserJet CM4540, M575, and M775; and ScanJet Enterprise 8500fn1 FutureSmart devices allow local users to read images of arbitrary scanned documents via unspecified vectors...

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

HP Onboard Administrator Security Bypass Vulnerability

HP Onboard Administrator is prone to a security bypass vulnerability. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

HP ProCurve Manager SNAC UpdateCertificatesServlet FileName Vulnerability

Added: 10/03/2013 CVE: CVE-2013-4812 BID: 62348 OSVDB: 97155 Background HP ProCurve Manager PCM is a secure, advanced Windows-based network management platform that allows administrators to configure, update, monitor, and troubleshoot ProCurve devices centrally. Problem The SNAC registration serv...

[security bulletin] HPSBGN02925 rev.1 - HP IceWall SSO, IceWall File Manager and IceWall Federation Agent, Multiple Remote Unauthorized Access Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03918632 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03918632 Version: 1 HPSBGN02925 rev....

HP XP P9000 Command View Advanced Edition Suite Software crossite scripting

No description provided...

HP ArcSight XSS

No description provided...

[security bulletin] HPSBGN02923 rev.1 - HP ArcSight Enterprise Security Manager Management Web Interface, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03901176 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03901176 Version: 1 HPSBGN02923 rev....

[security bulletin] HPSBMU02900 rev.3 - HP System Management Homepage (SMH) running on Linux and Windows, Multiple Remote and Local Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03839862 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03839862 Version: 3 HPSBMU02900 rev....

HP IceWall SSO, IceWall File Manager and IceWall Federation Agent multiple security vulnerabilities

Multiple unauthorized access vulnerabilities...

[security bulletin] HPSBST02919 rev.1 - HP XP P9000 Command View Advanced Edition Suite Software, Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03898171 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03898171 Version: 1 HPSBST02919 rev....

HP System Management Homepage multiple security vulnerabilities

XSS, privilege escalation, unauthorized access, information leakage, DoS...

HP/HPE Onboard Administrator Detection (HTTP)

Detection of HP/HPE Onboard Administrator. The script sends a connection request to the server and attempts to detect HP/HPE Onboard Administrator and to extract its version. Copyright C 2013 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are...