CVE-2018-6492: Improper Neutralization of Input During Web Page Generation

Persistent Cross-Site Scripting, and non-persistent HTML Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow persistent...

CVE-2018-6493: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in HP Network Operations Management Ultimate, version 2017.07, 2017.11, 2018.02 and in Network Automation, version 10.00, 10.10, 10.11, 10.20, 10.30, 10.40, 10.50. This vulnerability could be remotely exploited to allow Remote SQL Injection...

PT-2018-17583

Name of the Vulnerable Software and Affected Versions HP Network Operations Management Ultimate versions 2017.07 through 2018.02 HP Network Automation versions 10.00 through 10.50 Description The issue concerns Persistent Cross-Site Scripting and non-persistent HTML Injection. This could be...

HP Service Manager Detection

Binary data hpservicemanagerdetect.nbin...

HP Service Manager 9.30.x / 9.31.x / 9.32.x / 9.33.x / 9.34.x / 9.35.x < 9.35.6007 / 9.40.x / 9.41.x < 9.41.6000 / 9.50.x / 9.51.x Remote SQL Injection

The HP Service Manager application running on the remote host is version 9.30.x; 9.31.x; 9.32.x; 9.33.x; 9.34.x; 9.35.x prior to 9.35.6007; 9.40.x; 9.41.x prior to 9.41.6000; 9.50.x; or 9.51.x. It is, therefore, affected by an SQL injection vulnerability. Note that Nessus has not tested for these...

HP Network Automation 10.0x < 10.00.023 / 10.1x < 10.11.06 / 10.2x < 10.21.05 / 10.3x < 10.30.03 / 10.4x < 10.40.01 / 10.5x < 10.50.01 Multiple Vulnerabilities

The HP Network Automation application running on the remote host is version 10.0x prior to 10.00.023; 10.1x prior to 10.11.06; 10.2x prior to 10.21.05; 10.3x prior to 10.30.03; 10.4x prior to 10.40.01; or 10.5x prior to 10.50.01. It is, therefore, affected by multiple vulnerabilities Note that...

Unable to add store account on the native receiver for windows on HP T620 Win 7 embedded OS machines

After installing newer versions of the Receiver for Windows, that are by default configured to use only TLS 1.1 or 1.2, users are not able to add a store and may see this error message: "Your account cannot be added using this mail address. Make sure you entered it correctly. You may need to ente...

HP Network Automation SQL Injection Vulnerability (CNVD-2018-12120)

HP Network Automation Software is network configuration and management automation software. A SQL injection vulnerability exists in HP Network Automation, which could be exploited by remote attackers to submit a specially crafted SQL request to manipulate a database, obtain sensitive information,...

HP Service Manager SQL Injection Vulnerability

HP Service Manager is a cloud-based help desk management solution that helps organizations handle change and incident management. An SQL injection vulnerability exists in HP Service Manager. The vulnerability arises because the Service Manager web tier does not properly validate user-supplied...

HP Network Automation Cross-Site Scripting Vulnerability (CNVD-2018-12125)

HP Network Automation Software is network configuration and management automation software. A cross-site scripting vulnerability exists in HP Network Automation, which could be exploited by remote attackers to inject malicious script or HTML code that, when viewed with malicious data, could gain...

HPSBHF03584 rev. 8 - Derivative Side-Channel Analysis Method

Potential Security Impact Unauthorized exposure of privileged data from memory. Source: HP, HP Product Security Response Team PSRT Reported By: CVE-2018-3639: Google Project Zero GPZ Microsoft Security Response Center MSRC CVE-2018-3640: Researchers from SYSGO AG and BiZone LLC VULNERABILITY...

HPSBHF03582 rev. 2 - KRACK Vulnerability Affecting WPA2 Wireless Security

Potential Security Impact Information Disclosure Source: University of Leuven Reported by: Intel VULNERABILITY SUMMARY Enhancement to address CVE-2017-13080 and CVE-2017-13081, which is the KRACK vulnerability that affects the security of WPA2 wireless LAN encryption. RESOLUTION A Microsoft...

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

Design/Logic Flaw

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

DEBIAN-CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

ALPINE-CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

CVE-2018-0733 Incorrect CRYPTO_memcmp on HP-UX PA-RISC

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...

CVE-2018-0733

Because of an implementation bug the PA-RISC CRYPTOmemcmp function is effectively reduced to only comparing the least significant bit of each byte. This allows an attacker to forge messages that would be considered as authenticated in an amount of tries lower than that guaranteed by the security...