18135 matches found
PT-2018-17240
Name of the Vulnerable Software and Affected Versions: HP printers and MFPs affected versions not specified Description: A potential security issue has been identified, known as Cross Site Request Forgery, which could potentially be exploited remotely to allow elevation of privilege...
CVE-2018-5921: Cross-Site Request Forgery (CSRF)
A potential security vulnerability has been identified with certain HP printers and MFPs in 2405129000052 and other firmware versions. This vulnerability is known as Cross Site Request Forgery, and could potentially be exploited remotely to allow elevation of privilege...
Security Bulletin: Multiple vulnerabilities in IBM Java runtime affect ClearQuest Web and ClearQuest EmailRelay (CVE-2014-6593, CVE-2015-0383, CVE-2015-0410)
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Technology Edition that is used by ClearQuest Eclipse client, ClearQuest Web and ClearQuest EmailRelay. These were disclosed as part of the IBM Java SDK updates in January 2015. Vulnerability Details CVEID: CVE-2014-6593...
HPSBHF03593 rev. 2 - Firmware Trusted Platform Module (fTPM) for Select AMD Client Systems
Potential Security Impact Unauthorized access, elevation of privilege. Source: HP, HP Product Security Response Team PSRT Reported By: CTS-Labs VULNERABILITY SUMMARY A security vulnerability has been identified in specific versions of the AMD firmware-based Trusted Platform Module fTPM. The fTPM ...
h41213.www4.hp.com XSS vulnerability
Open Bug Bounty ID: OBB-680066 Description| Value ---|--- Affected Website:| h41213.www4.hp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
HP Performance Agent detection - deprecated
Plugin deprecated by an enhancement to findservice1.nasl Binary data hpperfdbannerdetect.nbin...
h20424.www2.hp.com XSS vulnerability
Open Bug Bounty ID: OBB-679814 Description| Value ---|--- Affected Website:| h20424.www2.hp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Security Bulletin: WebSphere MQ V5.3 for HP NonStop Server (MIPS and Itanium) is affected by OpenSSL vulnerability CVE-2018-0739
Summary WebSphere MQ V5.3 for HP NonStop Server MIPS and Itanium has addressed the following vulnerability: CVE-2018-0739 Vulnerability Details CVEID: CVE-2018-0739 DESCRIPTION: OpenSSL is vulnerable to a denial of service. By sending specially crafted ASN.1 data with a recursive definition, a...
HPSBHF03592 rev. 3 - Intel Converged Security and Management Engine (CSME) and Power Management Controller (PMC) Security Updates
Potential Security Impact Elevation of privilege, information disclosure, denial of service Source: Intel Reported By: Intel VULNERABILITY SUMMARY Potential security vulnerabilities with Intel CSME firmware and PMC firmware have been identified that could potentially place impacted platforms at...
h71044.www7.hp.com XSS vulnerability
Open Bug Bounty ID: OBB-673453 Description| Value ---|--- Affected Website:| h71044.www7.hp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
crm.sales.ext.hp.com XSS vulnerability
Open Bug Bounty ID: OBB-673133 Description| Value ---|--- Affected Website:| crm.sales.ext.hp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
locator.itcs.hp.com XSS vulnerability
Open Bug Bounty ID: OBB-670122 Description| Value ---|--- Affected Website:| locator.itcs.hp.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:|...
HP Jetdirect - Path Traversal Arbitrary Code Execution Exploit
Exploit for unix platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description...
HPSBHF03591 rev. 1 - Intel Wireless Driver DLL Injection Vulnerability
Potential Security Impact Escalation of privilege Source: Intel, HP, HP Product Security Response Team PSRT Reported by: Intel VULNERABILITY SUMMARY HP has been notified of a security vulnerability in the installation executables Autorun.exe and Setup.exe for Intel's wireless drivers and related...
HP Jetdirect - Path Traversal Arbitrary Code Execution (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description' = %q The module exploits a path traversal via...
HP Jetdirect Path Traversal Arbitrary Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require "rex/proto/pjl" class MetasploitModule 'HP Jetdirect Path Traversal Arbitrary Code Execution', 'Description' = %q The module exploits a path traversal via...
HPESBHF03887 rev.1 - HPE Intelligent Management Center (iMC) PLAT, Remote Arbitrary File Modification
Potential Security Impact: Remote: Arbitrary File Modification SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Intelligent Management Center iMC Plat 7.3 E0506P09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2018-7102 |...
Amazon Linux AMI : openssl (ALAS-2018-1065)
Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...
