arp.nl XSS vulnerability

Vulnerable URL: https://www.arp.nl/hp-probook-470-g4-notebook-y8a89et-ab'%22%3E%3Cimg%20src=x%20onerror=alert'OPENBUGBOUNTY'%3E%3C!-- Details: Description| Value ---|--- Patched:| No Latest check for patch:| 14.01.2018 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

HPE Universal CMDB 'HTTP TRACE' Information Disclosure Vulnerability

The host is installed with HP Universal CMDB and is prone to an information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbhpeuniversalcmdbhttptraceinfodiscvuln.nasl 7497 2017-10-19 07:06:06Z santu $ HPE Universal CMDB 'HTTP TRACE' Information Disclosure Vulnerability Authors: Rinu...

HPE Universal CMDB Remote Code Execution And XSS Vulnerabilities

The host is installed with HP Universal CMDB and is prone to remote cross site scripting and code execution vulnerabilities. OpenVAS Vulnerability Test $Id: gbhpeuniversalcmdbxssncodeexecvuln.nasl 7497 2017-10-19 07:06:06Z santu $ HPE Universal CMDB Remote Code Execution And XSS Vulnerabilities...

HPESBHF03792 rev.1 - HPE 501 Client Bridge, Aruba 501 Client Bridge, and HPE M111 Client Bridge - WPA2 Key Re-installation Vulnerabilities, Disclosure of information

Potential Security Impact: Local: Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HP M111 Client Bridge v5.3.8 and earlier HP 501 Client Bridge v1.0.2 and earlier, v2.0.0 and earlier Aruba 501 Client Bridge v1.0.2 and earlier, v2.0.0 and earlier CVSS...

How to configure console access on XenServer or Citrix Hypervisor

This article is for customers running Citrix Hypervisor or XenServer who want to configure serial console access to their XenServer hosts. In some support cases, serial console access to the XenServer host is required for debug purposes. The serial connection is to use with HyperTerminal or simil...

HP UCMDB Server BeanUtils Java Deserialization RCE

The HP Universal Configuration Management Database UCMDB Server running on the remote host is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons BeanUtils library. An unauthenticated, remote attacker can exploit...

HP Intelligent Management Center Arbitrary File Deletion Vulnerability

HP Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. An arbitrary file deletion vulnerability exists in HP Intelligent Management Center, where a remote...

HP Intelligent Management Center Arbitrary File Deletion Vulnerability (CNVD-2017-33293)

HP Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. An arbitrary file deletion vulnerability exists in HPE Intelligent Management Center, where a remote...

CVE-2017-14353

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

CVE-2017-14354

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...

Cross site scripting

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...

Remote code execution

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

CVE-2017-14354

HP UCMDB Foundation Software versions 10.10–10.33 are affected by a remote cross-site scripting vulnerability (CVE-2017-14354). The NVD entry describes remote XSS with medium severity (CVSS v3 base 6.1) and provides affected version ranges. Connected OpenVAS content also references remote XSS and...

CVE-2017-14354

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...

CVE-2017-14353

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...

CVE-2017-14353

CVE-2017-14353 describes a remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33. Connected sources indicate the issue is due to unsafe Java object deserialization via Apache Commons BeanUtils in the HPE/UCMD...

PT-2017-13411

Name of the Vulnerable Software and Affected Versions HP UCMDB Foundation Software versions 10.10 through 10.33 Description A remote code execution issue could be remotely exploited to allow code execution. Recommendations For HP UCMDB Foundation Software versions 10.10 through 10.33, update to a...

CVE-2017-14354: Improper Neutralization of Input During Web Page Generation

A remote cross-site scripting vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33 could be remotely exploited to allow cross-site scripting...

PT-2017-13412

Name of the Vulnerable Software and Affected Versions HP UCMDB Foundation Software versions 10.10 through 10.33 Description A remote cross-site scripting issue could be exploited to allow cross-site scripting. Recommendations For HP UCMDB Foundation Software versions 10.10 through 10.33, update t...

CVE-2017-14353: Improper Control of Generation of Code

A remote code execution vulnerability in HP UCMDB Foundation Software versions 10.10, 10.11, 10.20, 10.21, 10.22, 10.30, 10.31, 10.32, and 10.33, could be remotely exploited to allow code execution...