CVE-2023-26299

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability...

CVE-2023-26299

CVE-2023-26299 describes a potential TOCTOU vulnerability in HP PCs that use AMI UEFI firmware (system BIOS), which could allow arbitrary code execution. The issue stems from how TOCTOU could be exploited on affected systems, with HP/AMI providing mitigations via firmware updates. Connected docum...

PT-2023-25185

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro print products affected versions not specified Description The issue concerns a potential remote code execution and/or elevation of privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. This could...

PT-2023-20596 · Ami · Ami Uefi Firmware

Name of the Vulnerable Software and Affected Versions: HP PC products using AMI UEFI Firmware system BIOS affected versions not specified Description: A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified, which might allow arbitrary code execution. Updates have been...

Hp LaserJet Pro Printer 缓冲区错误漏洞

The HP Hp LaserJet Pro Printer is a laser printer from Hewlett-Packard HP in the United States. A security vulnerability exists in Hp LaserJet Pro Printer that stems from the presence of a stack-based buffer overflow...

PT-2023-25186

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro print products affected versions not specified Description The issue concerns a potential Buffer Overflow and/or Denial of Service in certain HP LaserJet Pro print products. This occurs when using the backup & restore feature...

PT-2023-25188

Name of the Vulnerable Software and Affected Versions HP LaserJet Pro print products affected versions not specified Description The issue is related to a Buffer Overflow that can occur when performing a GET request to scan jobs. This can potentially lead to Remote Code Execution. The estimated...

charitysamuel.co.uk Cross Site Scripting vulnerability OBB-3468544

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Certain HP LaserJet Pro Print Products - Potential Remote Code Execution, Information Disclosure

Certain HP LaserJet Pro print products are potentially vulnerable to Potential Remote Code Execution and/or Elevation of Privilege via Server-Side Request Forgery SSRF using the Web Service Eventing model. Update the printer firmware...

Certain HP LaserJet Pro Print Products - Potential Buffer Overflow

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow when performing a GET request to scan jobs. Update the printer firmware...

Certain HP LaserJet Pro Print Products - Potential Buffer Overflow

Certain HP LaserJet Pro print products are potentially vulnerable to a stack-based buffer overflow related to the compact font format parser. Update the printer firmware...

Certain HP LaserJet Pro Print Products – Potential Buffer Overflow and/or Denial of Service

Certain HP LaserJet Pro print products are potentially vulnerable to Buffer Overflow and/or Denial of Service when using the backup & restore feature through the embedded web service on the device. Update the printer firmware...

HP Printer RCE Vulnerability (HPSBPI03849)

Multiple HP printer are prone to a remote code execution RCE vulnerability when running HP Workpath solutions on potentially affected products. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

AMI UEFI Firmware June 2023 Security Update (TOCTOU)

A potential Time-of-Check to Time-of-Use TOCTOU vulnerability has been identified in certain HP PC products using AMI UEFI Firmware system BIOS, which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability. AMI has released updates to mitigate the...

CVE-2023-30903

HP-UX could be exploited locally to create a Denial of Service DoS when any physical interface is configured with IPv6/inet6...

Design/Logic Flaw

HP-UX could be exploited locally to create a Denial of Service DoS when any physical interface is configured with IPv6/inet6...

CVE-2023-30903

HP-UX vulnerability CVE-2023-30903 allows a local attacker to cause a Denial of Service when any physical interface is configured with IPv6/inet6. The issue affects HP-UX and is triggered via local access to the system, with the DoS outcome described in multiple sources (NVD, Red Hat, CVE lists)....

CVE-2023-30903

HP-UX could be exploited locally to create a Denial of Service DoS when any physical interface is configured with IPv6/inet6...

CVE-2023-30903

HP-UX could be exploited locally to create a Denial of Service DoS when any physical interface is configured with IPv6/inet6...

PT-2023-23035 · Hewlett Packard · Hp-Ux

Name of the Vulnerable Software and Affected Versions: HP-UX affected versions not specified Description: The issue allows for a local exploitation to create a Denial of Service DoS when any physical interface is configured with IPv6/inet6. Recommendations: At the moment, there is no information...