158 matches found
MAL-2025-43073 Malicious code in @zalastax/nolb-_smh (npm)
The package @zalastax/nolb-smh was found to contain malicious code...
Malicious code in @zalastax/nolb-_smh (npm)
The package @zalastax/nolb-smh was found to contain malicious code...
CVE-2023-50271
A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...
Design/Logic Flaw
A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...
CVE-2023-50271
Technical details about CVE-2023-50271 are not publicly available in the provided connected documents; monitor for updates.
CVE-2023-50271 HP-UX System Management Homepage, Disclosure of Information
A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...
CVE-2023-50271: Exposure of Sensitive Information to an Unauthorized Actor
A potential security vulnerability has been identified with HP-UX System Management Homepage SMH. This vulnerability could be exploited locally or remotely to disclose information...
HPESBUX04551 rev.1 - HP-UX System Management Homepage, Disclosure of Information
Potential Security Impact: Remote: Disclosure of Information, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE System Management Homepage - Prior to HPE SMH ver.A.3.2.23.09 CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | -...
smh.com.au XSS vulnerability
Vulnerable URL:...
HP System Management Homepage < 7.5.4.3 AddCertsToTrustCfgList DoS
The version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.5.4.3. It is, therefore, affected by a flaw in the AddCertsToTrustCfgList function within file modsmhconfig.so due to improper extraction of the common name in the subject when processing X.509...
HP System Management Homepage (SMH) AddXECert Remote DoS
The HP System Management Homepage SMH application running on the remote web server is affected by a denial of service vulnerability due to improper handling of the Common Name in a certificate uploaded via /proxy/AddXECert. An unauthenticated, remote attacker can exploit this, via a crafted...
HP System Management Homepage 7.3.x / 7.4.x < 7.5.0 Multiple Vulnerabilities (FREAK)
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is prior to 7.5.0. It is, therefore, affected by multiple vulnerabilities : - A flaw exists within the 'moddeflate' module when handling highly compressed bodies. A remote attack...
CVE-2015-2134
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2015-2134
HP System Management Homepage (SMH) prior to version 7.5.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that allows an authenticated remote user to hijack another user’s session and perform actions on behalf of the victim. The HP Security Bulletin HPSBMU03409 (rev.1) lists CVE...
CVE-2015-2134: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.5.0 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...
CVE-2014-7874: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 3.2.3 on HP-UX B.11.23, and before 3.2.8 on HP-UX B.11.31, allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...
[security bulletin] HPSBUX03139 SSRT101608 rev.1 - HP-UX running System Management Homepage (SMH), Remote Cross-Site Request Forgery
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04476799 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04476799 Version: 1 HPSBUX03139...
HP System Management Homepage < 7.4 Multiple Vulnerabilities
According to the web server's banner, the version of HP System Management Homepage SMH hosted on the remote web server is affected by the following vulnerabilities : - A flaw exists within the included cURL that disables the 'CURLOPTSSLVERIFYHOST' check when the setting on 'CURLOPTSSLVERIFYPEER' ...
CVE-2014-2640
Cross-site scripting XSS vulnerability in HP System Management Homepage SMH before 7.4 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in HP System Management Homepage SMH before 7.4 allows remote authenticated users to hijack the authentication of unspecified victims via unknown vectors...