CVE-2010-4030

HP Insight Control Performance Management for Windows is affected by CVE-2010-4030 (XSS). The vulnerability exists in versions prior to 6.2 and could allow remote injection of arbitrary script/HTML via unspecified vectors. HP’s security bulletin (HPSBMA02602 rev.1) confirms the issue and states t...

CVE-2010-4031

Vulnerability CVE-2010-4031 affects HP Insight Control Performance Management for Windows (before 6.2). The issue allows remote authenticated users to gain privileges via unknown vectors due to an unspecified vulnerability in the affected software’s privilege handling. HP’s security bulletin conf...

CVE-2010-4032

CVE-2010-4032 is a CSRF vulnerability in HP Insight Control Performance Management for Windows, pre-6.2, that could allow remote attackers to hijack user authentication via unknown vectors. The security bulletin indicates HP released v6.2 or later to resolve the issue; apply the update or equival...

CVE-2010-4100

HP Insight Control Performance Management for Windows (before 6.1 update 2) is affected by CVE-2010-4100. The vulnerability enables remote attackers to download/read arbitrary files via unknown vectors. HP’s security bulletin HP HPSBMA02600 (SSRT100239 rev.1) confirms the affected software and st...

CVE-2010-4031: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.2 allows remote authenticated users to gain privileges via unknown vectors...

PT-2010-5246

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via...

PT-2010-5247

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description The issue allows remote authenticated users to gain privileges via unknown vectors. Recommendations For versions prior to 6.2, update to version 6.2 or later to resolv...

PT-2010-5295

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.1 update 2 Description The issue allows remote attackers to read arbitrary files. Recommendations For versions prior to 6.1 update 2, update to version 6.1 update 2 or later to...

CVE-2010-4100: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors...

PT-2010-5248

Name of the Vulnerable Software and Affected Versions HP Insight Control Performance Management versions prior to 6.2 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of victims via unknown vectors. Recommendations For versions prior to 6.2,...

CVE-2010-4032: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2010-4030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in HP Insight Control Performance Management before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Denial of Service (DoS) Vulnerability in JP1/PAM

Overview A Built-in database in JP1/Performance Analysis - Manager and JP1/Performance Management - Analysis Manager JP1/PAM contains a vulnerability that could cause a denial of service DoS condition due to the abnormal ending of the database process when receiving unexpected data. After the...

HP OpenView Network Node Manager getnnmdata.exe CGI Hostname buffer overflow

Added: 05/28/2010 CVE: CVE-2010-1555 BID: 40072 OSVDB: 64976 Background HP OpenView Network Node Manager is network availability and performance management software. Problem A buffer overflow vulnerability in Network Node Manager allows remote attackers to execute arbitrary commands by sending a...