PT-2018-4914

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi versions 10.00 through 10.20 Description A local code execution security issue was identified. Recommendations For versions 10.00 through 10.20, at the moment, there is no information about a newer version that...

CVE-2016-4398: Deserialization of Untrusted Data

A remote arbitrary code execution vulnerability was identified in HP Network Node Manager i NNMi Software 10.00, 10.01 patch1, 10.01 patch 2, 10.10 using Java Deserialization...

PT-2018-4917

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi Software versions 10.00 through 10.10 Description A security issue was identified that could result in cross-site scripting XSS. Recommendations For versions 10.00 through 10.10, update to a version that includes...

CVE-2016-4404: Improper Restriction of Operations within the Bounds of a Memory Buffer

A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via a memory allocation issue...

PT-2018-4919

Name of the Vulnerable Software and Affected Versions HP KeyView versions prior to 11.2 Description A security issue was identified in the Filter SDK component of HP KeyView, which could be exploited remotely to allow code execution via memory corruption. Recommendations For versions prior to 11....

CVE-2016-4392: Improper Neutralization of Input During Web Page Generation

A remote cross site scripting vulnerability has been identified in HP Business Service Management software v9.1x, v9.20 - v9.25IP1...

CVE-2016-4402: Improper Restriction of Operations within the Bounds of a Memory Buffer

A security vulnerability was identified in the Filter SDK component of HP KeyView earlier than v11.2. The vulnerability could be exploited remotely to allow code execution via buffer overflow...

PT-2018-4920

Name of the Vulnerable Software and Affected Versions HP KeyView versions prior to 11.2 Description A security issue was identified in the Filter SDK component of HP KeyView, which could be exploited remotely to allow code execution via a memory allocation issue. Recommendations For versions prio...

CVE-2016-4399: Improper Neutralization of Input During Web Page Generation

A security vulnerability was identified in HP Network Node Manager i NNMi Software 10.00, 10.01 patch1, 10.01 patch 2, 10.10. The vulnerability could result in cross-site scripting XSS...

CVE-2016-4405: Deserialization of Untrusted Data

A remote code execution vulnerability was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization versions v9.20-v9.26...

PT-2018-4916

Name of the Vulnerable Software and Affected Versions HP Network Node Manager i NNMi Software versions 10.00 through 10.10 Description A security issue was identified that could result in cross-site scripting XSS. Recommendations For versions 10.00 through 10.10, update to a version that includes...

CVE-2016-4400: Improper Neutralization of Input During Web Page Generation

A security vulnerability was identified in HP Network Node Manager i NNMi Software 10.00, 10.01 patch1, 10.01 patch 2, 10.10. The vulnerability could result in cross-site scripting XSS...

PT-2018-4921

Name of the Vulnerable Software and Affected Versions HP Business Service Management BSM versions v9.20 through v9.26 Description A remote code execution issue was identified in HP Business Service Management BSM using Apache Commons Collection Java Deserialization. Recommendations For HP Busines...

HP Bug Bounty Program: Hack HP Printers & Earn Up To $10,000

By Uzair Amir HP Discloses its Bug Bounty Program and Here’s What You Need To Know. The Palo Alto Calif. based HP Inc., has disclosed what it terms as the industry’s first-ever bug bounty program, which has been launched to inspect printer security relates issues. The print security bug bounty...

Command Execution Vulnerability in HP LaserJet Professional P1600 Series Printers

HP LaserJet Professional P1600 is a printer series developed by Hewlett-Packard. A command execution vulnerability exists in the HP LaserJet Professional P1600 series of printers. An attacker could exploit the vulnerability to execute commands and gain server privileges...

PT-2018-1451

Name of the Vulnerable Software and Affected Versions HP Inkjet printers affected versions not specified HP PageWide, DesignJet, AMP, Deskjet, Envy, Ink Tank, Officejet, Photosmart, Smart Tank affected versions not specified Description A security issue has been identified that could allow remote...

HP Offers Up to $10,000 Rewards for Printer Bugs

HP launched a bug bounty program for printers Tuesday, with a max payout of $10,000 a vulnerability. The company, which has partnered with Bugcrowd to offer between $500 and $10,000 for bug discoveries, said that it marks the first-ever bug bounty program for printers. “HP has offered a way for...

CVE-2017-3210

Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the...

CVE-2017-3210 Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution

Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A number of applications developed using the Portrait Displays SDK do not use secure permissions when running. These applications run the...

CVE-2017-3210

The CVE-2017-3210 issue affects Portrait Displays SDK services where pdiservice.exe runs with NT AUTHORITY/SYSTEM permissions and is writable by all Authenticated Users, enabling local privilege escalation. Affected applications include Portrait Display SDK-based tools such as Fujitsu DisplayView...