EUVD-2017-17890

Malware in sbrugna...

EUVD-2017-17892

Malware in sbrugna...

EUVD-2017-5852

Malware in sbrugna...

EUVD-2017-17889

Malware in sbrugna...

CVE-2017-8952

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8952

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8950

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8949

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8951

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

Information disclosure

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

Information disclosure

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

Information disclosure

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

Information disclosure

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8951

HPE SiteScope 11.2x/11.3x contains an information-disclosure vulnerability (CVE-2017-8951). Credentials stored in Credential Profiles can be sent in plaintext over HTTP to the client, enabling potential disclosure. CERT/CC notes mitigation via updates, TLS/SSL enforcement, and restricted access; ...

CVE-2017-8950

HP SiteScope (HP) versions 11.2x–11.3x are affected by CVE-2017-8950, a vulnerability in the ss_pu.jar crypto library that uses a broken or risky cryptographic algorithm, enabling partial information disclosure of credentials. Root cause: use of weak crypto; impact: potential exposure of sensitiv...

CVE-2017-8952

CVE-2017-8952 is an information disclosure vulnerability in HP SiteScope prior to/around 11.2x–11.3x where an unauthenticated remote attacker could access arbitrary files on the SiteScope host by exploiting improper authentication. Public docs describe it as a missing authentication issue (CWE-30...

CVE-2017-8949

CVE-2017-8949 affects HPE SiteScope 11.2x and 11.3x, linked to a hard-coded cryptographic key in the ss_pu.jar library that enables information disclosure. The issue is part of a group of vulnerabilities (CVE-2017-8949, -8950, -8951, -8952) affecting the same product, with separate weaknesses inc...

CVE-2017-8951

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8952

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...

CVE-2017-8950

A Disclosure of Sensitive Information vulnerability in HPE SiteScope version v11.2x, v11.3x was found...