18151 matches found
CVE-2016-1986: Improper Control of Generation of Code
HP Continuous Delivery Automation CDA 1.30 allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections library...
HP Operations Manager for Windows 8.x and 9.0 Java Object Deserialization RCE
The version of HP Operations Manager installed on the remote host has the Sam Admin Adapter installed. This package is no longer supported by HP and is affected by a remote code execution vulnerability due to unsafe deserialize calls of unauthenticated Java objects to the Apache Commons Collectio...
HP Operations Manager for Windows Installed
Binary data hpoperationsmanagerforwininstalled.nbin...
HP Client Security Manager 8.3.4 Cross Site Scripting
HP Client Security Manager 8.3.4 Cross-Site Scripting Vulnerability Vendor: HP Inc. Product web page: http://www.hp.com Affected version: 8.3.4.1811 Summary: HP Client Security Manager provides enhanced Windows login and website single-sign-on capabilities. Security Manager is also the host for H...
HP-UX PHNE_44295 : s700_800 11.31 s700_800 cumulative PPP patch
s700800 11.31 s700800 cumulative PPP patch : A potential security vulnerability has been identified with the HP-UX pppoec utility. The vulnerability could be exploited in allowing a local user to elevate their privilege. References: CVE-2015-2126 SSRT102094. %NASLMINLEVEL 70300 C Tenable Network...
HP-UX PHNE_44296 : s700_800 11.23 cumulative PPP patch
s700800 11.23 cumulative PPP patch : A potential security vulnerability has been identified with the HP-UX pppoec utility. The vulnerability could be exploited in allowing a local user to elevate their privilege. References: CVE-2015-2126 SSRT102094. %NASLMINLEVEL 70300 C Tenable Network Security...
HP Virtual Table Server (VTS) Database Import RCE
The HP Virtual Table Server running on the remote host is affected by a remote code execution vulnerability. An unauthenticated, remote attacker can exploit this, via a malicious connection string or SQL command, to execute arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if...
HP Virtual Table Server Detection
An HP Virtual Table Server VTS is listening on the remote host. VTS offers an alternative to standard parameterization for load and performance testing, and it is a component of HP LoadRunner and HP Performance Center. C Tenable Network Security, Inc. include"compat.inc"; if description...
HP UCMDB Browser information disclosure Vulnerability(CVE-2 0 1 5-6 8 6 2)-vulnerability warning-the black bar safety net
Affected system: HP HP UCMDB Browser the 4.02 Description: CVECAN ID: CVE-2 0 1 5-6 8 6 2 HP UCMDB Browser is to access UCMDB data of the lightweight Web client. HP UCMDB Browser 4.02 prior version there is a security vulnerability. A remote attacker could exploit this vulnerability can obtain...
CVE-2015-6858
HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-5447
Cross-site scripting XSS vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
CVE-2015-5446
HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2015-5445
Cross-site request forgery CSRF vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
Code injection
HP StoreOnce Backup system software before 3.13.1 allows remote attackers to execute arbitrary code via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP StoreOnce Backup system software before 3.13.1 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
Design/Logic Flaw
HP Insight Control server provisioning before 7.5.0 RabbitMQ allows remote attackers to obtain sensitive information via unspecified vectors...
CVE-2015-6858
HP Insight Control Server Provisioning (HP) is affected by CVE-2015-6858 due to a vulnerability in the RabbitMQ component used by the server provisioning feature prior to version 7.5.0. The issue enables remote attackers to obtain sensitive information via unspecified vectors. The provided docume...
CVE-2015-5445
CVE-2015-5445 affects HP StoreOnce Backup System software prior to 3.13.1. The vulnerability is a Cross-site Request Forgery (CSRF) that allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors. Public references describe the affected product and C...
