CVE-2013-4804

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors...

CVE-2013-2366

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802...

Code injection

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802...

CVE-2013-4804

HP Business Process Monitor (BPM) vulnerable to remote code execution and information disclosure as described for CVE-2013-4804. Affected software versions on Windows are BPM 9.13.1 patch 1 and BPM 9.22 patch 1. The root cause is not explicitly detailed in the description, but the HP Security Bul...

CVE-2013-4804

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors...

CVE-2013-2366

HP BPM vulnerability CVE-2013-2366 affects HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1. The root cause is a flaw in the tp_bpm_admin.exe server (listens on TCP port 2696) that allows remote code execution via a directory traversal in file upload handling. Exploitation is unauthent...

CVE-2013-2366

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802...

PT-2013-3701

Name of the Vulnerable Software and Affected Versions HP Business Process Monitor versions 9.13.1 patch 1 through 9.22 patch 1 Description The issue allows remote attackers to execute arbitrary code and obtain sensitive information. The exact vectors used for the attack are not specified...

PT-2013-5203

Name of the Vulnerable Software and Affected Versions HP Business Process Monitor version 9.13.1 patch 1 HP Business Process Monitor version 9.22 patch 1 Description The issue allows remote attackers to execute arbitrary code and obtain sensitive information. The exact vectors used for the attack...

CVE-2013-2366: Undefined Security Weakness

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors, aka ZDI-CAN-1802...

CVE-2013-4804: Undefined Security Weakness

Unspecified vulnerability in HP Business Process Monitor 9.13.1 patch 1 and 9.22 patch 1 allows remote attackers to execute arbitrary code and obtain sensitive information via unknown vectors...

[security bulletin] HPSBMU02901 rev.1 - HP Business Process Monitor running on Windows, Remote Execution of Arbitrary Code and Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03844594 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03844594 Version: 1 HPSBMU02901 rev....

HP Business Process Monitor security vulnerabilities

Information leak, code execution...

elproLOG MONITOR Webaccess 2.1 - Multiple Vulnerabilities

elproLOG MONITOR Webaccess 2.1 - Multiple Vulnerabilities Title: ====== elproLOG MONITOR WebAccess 2.1 - Multiple Vulnerabilities Date: ===== 2013-09-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1086 VL-ID: ===== 1086 Common Vulnerability Scoring System:...

elproLOG MONITOR WebAccess 2.1 - Multiple Web Vulnerabilities

Title: ====== elproLOG MONITOR WebAccess 2.1 - Multiple Vulnerabilities Date: ===== 2013-09-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1086 VL-ID: ===== 1086 Common Vulnerability Scoring System: ==================================== 6.7 Introduction: ============...

elproLOG MONITOR WebAccess 2.1 XSS / SQL Injection

Title: ====== elproLOG MONITOR WebAccess 2.1 - Multiple Vulnerabilities Date: ===== 2013-09-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1086 VL-ID: ===== 1086 Common Vulnerability Scoring System: ==================================== 6.7 Introduction: ============...

SolarWinds Server and Application Monitor - ActiveX Pepco32c Buffer Overflow

SolarWinds Server and Application Monitor - ActiveX Pepco32c Buffer Overflow ' 132 bytes in we control ecx before the call ecx instruction buffer = String132, "A" ecx = String4, "B" junk = String3086, "C" arg1 = buffer + ecx + junk target.PEstrarg1 = arg1...

SolarWinds Server and Application Monitor - ActiveX 'Pepco32c' Buffer Overflow

' 132 bytes in we control ecx before the call ecx instruction buffer = String132, "A" ecx = String4, "B" junk = String3086, "C" arg1 = buffer + ecx + junk target.PEstrarg1 = arg1...

CVE-2013-5488: Improper Input Validation

Cisco Common Services, as used in Cisco Prime LAN Management Solution LMS, Cisco Security Manager, Cisco Unified Service Monitor, and Cisco Unified Operations Manager, does not properly interact with the ActiveMQ component, which allows remote attackers to cause a denial of service memory...